将DDS/MongoDB分片集群迁移到DDS/MongoDB分片集群 数据库 所需权限 参考赋权语句 源库 全量: mongos用户需要具备admin库的readAnyDatabase权限,config库的read权限; 连接shard的用户需要有admin库的readAnyDatabase权限,有local库的read权限。 增量: mongos用户需要具备admin库的readAnyDatabase权限,config库的read权限; 连接shard的用户需要具备admin库的readAnyDatabase权限、clusterMonitor权限,local库的read权限。 全量: db.grantRolesToUser("用户名",[{role:"readAnyDatabase",db:"admin"}, {role:"read",db:"config"}]) db.grantRolesToUser("用户名",[{role:"readAnyDatabase",db:"admin"}, {role:"read",db:"local"}]) 增量: db.grantRolesToUser("用户名",[{role:"readAnyDatabase",db:"admin"}, {role:"read",db:"config"}]) db.grantRolesToUser("用户名",[{role:"readAnyDatabase",db:"admin"}, {role:"clusterMonitor",db:"admin"},{role:"read",db:"local"}]) 目标库 mongos用户需要具备admin库的dbAdminAnyDatabase权限,admin库的readWriteAnyDatabase权限以及有admin库的clusterManager权限。 db.grantRolesToUser("用户名",[{role:"dbAdminAnyDatabase",db:"admin"}, {role:"readWriteAnyDatabase",db:"admin"},{role:"clusterManager",db:"admin"}])