You need to enable JavaScript to run this app.
导航
账号权限概述
最近更新时间:2025.01.15 16:16:59首次发布时间:2022.03.11 16:23:48

文档数据库 MongoDB 版提供了不同类型的数据库账号,您可以根据业务场景自定义数据库账号并赋予对应权限实现分库分权操作,满足数据库权限精细化管理需要。本文介绍 MongoDB 支持的账号类型以及数据库账号权限详情。

账号类型

文档数据库 MongoDB 版提供了三种类型的账号:超级管理员账号、高权限账号和普通账号。
不同类型账号的具体说明如下表所示。

账号类型账号说明注意事项

超级管理员账号

即 root 账号。MongoDB 实例创建成功后,系统会默认在 admin 库中创建一个超级管理员账号。

  • 每个 MongoDB 实例中仅允许存在一个超级管理员账号。
  • 不可删除或重命名 root 账号。
  • 支持重置 root 账号,包括重置账号密码和补全 root 账号权限。重置方法,请参见重置 root 账号

高权限账号

对 admin 库有任意权限的账号即为高权限账号。

  • 高权限账号和普通账号均无数量限制。

  • 均支持创建修改密码修改权限删除操作。

  • 可通过对 admin 库权限的修改实现高权账号和普通账号的类型转换。

普通账号对 admin 库没有任何权限的账号即为普通账号。

数据库与账号权限

说明

关于 MongoDB 的更多账号权限信息,请参见 Built-In Roles

账号权限

下表列举了文档数据库 MongoDB 版支持的账号权限及权限说明供您参考。

权限类型权限名称权限说明
管理员操作权限dbAdmin拥有对数据库对象执行管理操作的权限,但不具备对数据库执行读写操作的权限。
userAdmin在本库下创建用户的权限。
dbOwner对本库执行所有操作的权限。
集群操作权限clusterMonitor查询集群和复制集的权限。
普通操作权限read对本库执行查询操作的权限。
readWrite对本库执行增删改查等操作的权限。
实例操作权限readAnyDatabase查询本实例所有库的权限。
readWriteAnyDatabase增删改查本实例所有库的权限。
userAdminAnyDatabase在本实例所有库下创建用户的权限。
dbAdminAnyDatabase本实例所有库的 dbAdmin 权限。
备份操作权限backup对本实例所有库执行备份操作权限。

不同数据库允许授予的权限

下表列举了文档数据库 MongoDB 版对不同数据库允许授予的权限供您参考。

数据库类型说明允许授予的权限

系统库

admin

该数据库存储了最核心的管理信息。

  • read
  • userAdmin
  • readAnyDatabase
  • readWriteAnyDatabase
  • userAdminAnyDatabase
  • dbAdminAnyDatabase
  • clusterMonitor
  • backup
config该数据库主要存储了 MongoDB 的配置数据。更多详情,请参见 config databaseread
local该数据库用于存储复制过程中使用的数据及其他特定数据。更多详情,请参见 local databaseread

自定义库

您在 MongoDB 实例中自行创建的数据库。

  • read
  • readWrite
  • dbAdmin
  • userAdmin
  • dbOwner

弱密码列表

为提高账号安全性,降低数据泄露的风险,即使某些密码满足设置规则,文档数据库 MongoDB 版也不允许使用这些极易被破解的弱密码。
下表列举了 MongoDB 中禁止使用的所有弱密码供您参考。

弱密码分类包含的弱密码

以特殊字符开头的弱密码

  • ```111qqq`123qwer`1q2w3e4r`1qaz2wsx
  • !@#$1234QWER!@#$qwer1234!@#$qwerASDF!@#$qwerASDFzxcv!@#123abc!@#123qaz!@#123qwe!1q2w3e4r!1qaz@2wsx!1qaz@2wsx#3edc!234qwer!@#abc123!q2w3e4r!Q2w#E4r!Q2w#E4r%T6y!QAZ1234!QAZ1qaz!qaz2wsx!qaz2wsX!Qaz2wsx!QAZ2wsx!qaz2wsx3edc!QAZ2wsx3edc!QAZ2wsx#EDC!QAZ2wsx#EDC4rfv!QAZ2wsx#EDC4rfv%TGB!QAZ3edc!@#qazwsx1717!QAZ@WSX3edc!QAZ@WSX3edc4rfv!qazxsw2!QAZxsw2!@QW12qw!Q@W3e4r!@#qwe123!@#QWE123!@#qweASD!@#QWEasd!@#QWEasdzxc
  • @163.com@admin123@dmin123@dmin1234
  • -pl,0okm

以数字开头的弱密码

  • 04v4NOxC7V5GsTe04v4NOxC7V5GsTeWHxolMxiKL0523_vcd0523_vcd0-p0-p0-p
  • 10isp.com!111aaaAAA111qqq!!!111qqq...12231bkjh!@#123$admin12306.cn123@123a123123aA123123Aa123@123abc123@123.com1234!@#$qwer1234!@#$qwerQWER123456789Aa12345678aA12345678Aa12345678Qq1234567aA1234567Aa123.456a123456-a123456.a123456@a123456a!123456a.123456a?123456a@123456A!123456@aA123456aA123456Aa123456aB123456Ab123456@abc123456aBc123456Abc123456abcABC123456.com123456qwerty!@#$%^12345@qwert12345qwert!@#$%1234@abc1234.abcd1234@abcd1234abcd!1234Abcd1234asdf!@#$1234.com1234@qwer1234qwer!1234qwer!@#1234qwer.1234Qwer1234qwer!@#$1234QWER!@#$1234qwer!@#$QWER1234qwerASDF123abc!@#123abc..123ABC!@#123!@#abc123abcABC123ABCabc123@abcd123.admin123@admin123asd,./123.com!@#123..com123!@#qaz123@qq.com123qwe!!123qwe!@123qwe!@#123qwe,.123qwe,./123!@#qwe123!@#QWE123qwe$%^123qweasd!@#123qweASD123QWEasd123qweasdzxc!@#123qwe!@#QWE123qweQWE123!@#qweQWE123!@#sa12qwaszx!@12QWaszx12qw!@QW1!deshine1q2w3e!@1q2w3e!@#1q2w3e$R1q2w3e$R%T^Y1q2w3e4r!1q2w3e4r!@1q2w3e4r%1q2w3e4r.1q2w3e4R1Q2w3e4r1Q2W3e4r1q2w3e4r!@#$1q2w3e4r5t!1q2w3e4r5t.1q2w3e4r5T1q2w3e4r5t!@#$%1q2w3e4r5t!Q@W#E$R%T1q2w3e!Q@W#E1q2w#E$R1q2w!Q@W1qa@WS3ed1qaz!@#$1qaz0p;/1qaz@1231qaz1QAZ1qaz@2wsx1qaz2wsx!1qaz2wsx!@1qaz2wsx!@#1qaz2wsx.1qaz2wsx@1qaz2wsx@!1qaz2wsX1qaz2WSX1qaz2WSX!1qaZ2wsX1Qaz2Wsx1QaZ2WsX1QAZ2wsx1qaz2wsx3EDC1Qaz2Wsx3Edc1qaz2wsxE1qaz2wsx#edc1qaz2wsx#EDC$RFV1qaz2wsx!QAZ@WSX1qaz#EDC5tgb1qaz!qaz1qaz!QAZ1qaz@wsx1qaz@WSX1QAZ@WSX1qaz@WSX1231qaz@WSX3edc1qaz@WSX3edc$RFV1qaz@wsx#edc1qaz@WSX#EDC1qazxcvbnm,./1qazxdr5^&*(1qazxdr5!@#$%1qazxdr5@#$1qazxsw@1qazXSW@1qazxsw2!@1qazxsw2!@#1qazXSW21QAZxsw21qazxsw2#EDC1qazxsw2!QAZXSW@1qazXSW@3edc1qazzaq!1qazZAQ!1qazZAQ11q@W3e$R5t
  • 2wsx#EDC2wsx@WSX
  • 33ip.com3edc$RFV3edc$RFV5tgb3edc#EDC3edcVFR$
  • 4rfv$RFV4rfv%TGB
  • 5201314@qq.com5201314@QQ.com59sqlserver.cn5tgb^YHN
  • 7i24.com7ujm8ik,7ujm,ki8
  • 8ik,9ol.
  • 98xw.com

以字母开头的弱密码

  • a123.123@a123456a+123456a.123456a@123456a_123456a123.456a123456!a123456*a123456.A@123456A123456!A123456*a123456AA123456aa123456BA1b2c3d4a6160.0!XAa000000Aa111111Aa123123Aa1234!@#$Aa@12345aA123456Aa@123456Aa_123456Aa123456Aa123456!Aa123456*Aa123456@aA1234567Aa1234567Aa12345678Aa123456789Aa1234567890Aa123654Aa666666aaa123!@#aaaAAA111AAAaaa111AAAaaa123Ab123456Ab123456789abc!@#123abc..123abc@123.abc123!!abc123!@#abc123..abc123...Abc123!@#ABC123!@#ABC123..abc123$%^abc123$$abc.1234abc@1234Abc@1234abc1234!@#$abc@12345Abc@12345Abc12345abc.123456abc@123456abc_123456abc123456.Abc123456Abc1234567abc@12345678Abc123456789Abc1234567890abc123ABCabc123ABC!@#ABC123abcabc!@#321abc.369*abcABC!@#abcABC123abcABC123!@#ABCabc123ABCabc123!@#ABCabc123456abcd.123abcd@123abcd123!@abcd123!@#Abcd@123Abcd123$abcd!1234abcd+1234abcd-1234abcd.1234abcd=1234abcd@1234abcd_1234abcd1234!abcd1234!@#abcd1234@Abcd#1234Abcd.1234Abcd@1234Abcd1234ABcd1234ABCD@1234abcd1234!@#$abcd@12345Abcd123456Abcd12345678Abcde12345Admin!@#admin$123Admin001admin@@1admin@12admin12#admin!@#123admin!123admin#123admin*123admin+123admin-123admin.123admin@123admin_123admin`123admin123!admin123!@admin123!@#admin123#admin123#@!admin123.admin123@aDmin123Admin!@#123Admin!123Admin@123Admin_123Admin123Admin123!Admin123!@#Admin123.Admin123@ADMIN@123admin123$admin123$%^Admin123$admin+1234admin.1234admin@1234admin_1234admin1234@Admin-1234Admin@1234Admin1234admin1234!@#$admin@12345admin`12345Admin@12345Admin12345admin#123456admin-123456admin@123456Admin-123456Admin@123456Admin_123456Admin123456admin@123456789Admin@123456789admin123.comadmin@2008Admin2008admin@2010Admin2010admin@2012Admin2012Admin2013admin@2014Admin2014admin@2015Admin2015admin@2016Admin2016admin@2017Admin2017admin@2018Admin2018admin!234admin@321Admin@321admin!@#456admin@789admin@888Admin888ADMINadmin123Administrat0rAdministrator1Administrator123admin!QAZai@123456Apple123as123!@#aS123456As123456asd!@#123asd123!@#asd123,./asd123..asd123...ASD!@#123asd@123456Asd123456ASD123asdASDasd123asdf.123asdf@123asdf123$asdf.1234asdf@1234asdf1234!Asdf1234asdf1234!@#$Az123456
  • bc123!@#Beijing2008bmilpCMS!@#123bs123!@#bt123!@#By123456
  • caonima123!@#Cc123456cd@123456Changeme_123Changeme123Chir0touchChred1433Cp1234@sacr!@#123cs!@#123ctrls.1234$#$cz123!@#
  • dell@123Dell123!dell-1234dell@123456DELL123dell123dell@2014dell-2015dell@2015Demo123456dh123!@#domens.com2007dr@123456ds!@#123duzon@1234dy!@#123
  • ed@123456ejwhs12#$ejwhs123$eq123!@#ex123!@#
  • ff123!@#Formula1Founder123fs123!@#ft!@#123FTRYH5AAswq#$
  • g67ytrfdcxvDFGgbrs,.1989gd@123456good@123gps123!@#gpy1314!#!$,./
  • hb123!@#hc123!@#hello@123Hello123hg2000developer!hh@123456hik12345+hk123!@#hl123!@#hnlb@700Hotmail.comhp123!@#hp@123456hs123!@#ht123!@#Huawei12#$huawei@123Huawei@123Huawei123hw123!@#hy!@#123hy123!@#hywjs!14hz@123456hzth-801
  • idc200999!@#idc4090.cnidcicp123,India@123India123inetsn@SQL#No.0infox1eies2sps3was4!Infox1Eies2Sps3Was4!
  • java.2000java.2005java.2008jc123!@#jh@123456jm123!@#Js123456jw!@#123jw123!@#jy@123456
  • kd123!@#kh!@#123kh@123456kingdee@1kingdee@123Kingdee@123kk30com!@#ks@123456kt123!@#ky@123456
  • Manager1manager.123Manager880master@123Master123Melbourne@719%mf123!@#Mm123456ms@123456MSR1433_zymtaADM2000*mysql@123
  • nE7jA%5mNetwork1nihao123!
  • ok7890KKon123!@#owet00r!@!ozzy123!
  • p@$$w0rdP@$$w0rdP@$$w0rd@123P@$$w0rd123P@$$w0rd321P@$$wordP@$$word01p@$$word1P@$$word1P@$$word123P4$$w0rdP4ssw0rdP4sswordp@55w0rdP@55w0rdP@55w0rd1P@55w0rd123p@55wordP@55wordpa$$w0rdPa$$w0rdPa$$w0rd01Pa$$w0rd1pa$$w0rd123Pa$$w0rd123Pa$$w0rd1234Pa$$wordPa$$word0Pa$$word1Pa$$word2017Pa$sw0rdPa55w0rdPa55wordPa55word01pass@123pass123!pass123!@#Pass.123Pass@123pass123$pass@1234Pass1234Pass123456passw0rd!Passw0rdPassw0rd!Passw0rd001passw0rd@1Passw0rd@1Passw0rd1Passw0rd11Passw0rd12passw0rd@123Passw0rd@123Passw0rd123Passw0rd1234Passw0rd2016Passw0rd2017passwd@123Pass@wordPassword!Password!!!Password@Password0password!01password01!Password01Password01!pass@word1password-1password.1password@1password1!Pass@word1Password.1Password@1Password1Password1!Password11Password111Password12pass@word123password.123password@123password_123password123!@#Password@123Password123Password123@password123$Password123$password@1234Password@1234Password1234Password12345Password123456Password2015Password2016Password2017Password9PASSw@rdp@ss1234P@ss1234p@ssw0rdp@ssw0rd!@#p@ssw0rDP@ssw0rdP@ssw0rd!P@ssw0rd!@P@ssw0rd!@#P@ssw0rd*P@ssw0rd@P@ssW0rdP@SSW0RDp@ssw0rd000p@ssw0rd01P@ssw0rd01p@ssw0rd1P@ssw0rd1P@ssw0rd11P@ssw0rd12p@ssw0rd.123p@ssw0rd@123p@ssw0rd123P@ssw0rd.123P@ssw0rd@123P@ssw0rd123P@SSW0RD123p@ssw0rd1234P@ssw0rd1234P@ssw0rd@12345P@ssw0rd12345P@ssw0rd123456P@ssw0rd2P@ssw0rd2017P@ssw0rd321P@ssw0rd4321p@ssWordP@sswordP@ssword!P@sswOrdP@ssword01p@ssword1P@ssword1P@ssword12p@ssword123!P@ssword@123P@ssword123
  • q1w2e3!@#q1w2e3r4@Q1w2e3r4Q1w2e3r4t5q1w2e3r4t5!@#$%qa123!@#Qa123456qaz!@#123qaz123!@#Qaz123456QAZ123qazqaz321..qaz789!@#QAZwsx!@#qazwsx!1qazwsx!@#123qazwsx@123Qazwsx123QAZwsx123qazwsx!23qazwsxEDC!@#qazwsxedc!@#123QAZxsw123qf123!@#qq123!@#qq123456.Qq123456Qq123654Qq433102819234qs@123456Qw123456Qw123456789Q!w2e3r4qwe!@#123qwe,./123qwe123!@qwe123!@#qwe123..Qwe123!@#QWE!@#123Qwe123456qwe123QWE!@#QWE123qweqweasd!@#123qweasd123!@#qweASD123QWEasd123qweASDzxc!@#qweasdzxc@123qweQWE123QWEqwe123qweQWE1234qwer!@#$1234qwer@123qwer123!@#qwer.1234qwer@1234qwer_1234qwer1234!qwer1234!@qwer1234%^&*qwer1234.Qwer1234qwer1234!@#$qwer!234Qwer!234qwer4321!@#$qwert!@#$%12345qwert*12345Qwert12345qwert12345!@#$%Qwerty123Qwerty12345qwerty!@#123456qwertyuiop@123QWERzzidc!@#$qz123!@#
  • rg123!@#root@123root_123root123!root123!@#Root@123root@1234Root1234root1234!@#$Root123456root_4311.sccrt!@#123ruijie@123sa!@#123sa@!@#123sa@123!@#sa123!@#sa123#@!sa123...Sa!@#123Sa123!@#sa123!@#$sa123$%^sa-12345sa@12345sa_12345sa12345!sa12345@sa-123456sa.123456sa@123456sa_123456sa123456!sa123456!@#sa123456***sa123456.Sa@123456Sa_123456Sa123456Sa123456%SA@123456Sa1234567sa@123456789Sa123456789sa123456SAsa_123654789sa123qwe!@#sa123QWEsa2008@))*sa!@#456sa@654321Samsung1sayexe.1982sd@123456SefficeLab1004Senha123Server01server@123Server@123Server123Server2003Server2008Server2012Server2016server!@#456server@6111sf!@#123Sh123456sh2010@#$%shisp.com123sk123!@#sns123.,son_19820606sql!@#123sql123!@#sql@1234sql_1234Sql@1234Sql12345Sql123456sql@2000sql@2005sql-2008sql@2008sql_2008sql2008!sql2008!@#sql@2010sql@2011sql2012!sql@2014sql@2018SqlMsde@InfoxEie2000Sqlserver123Sqlserver2008Start123super@123sw123!@#sx@123456system@123System123Sz123456
  • Temp1234Temp123456test@123test123!Test@123test@1234Test1234Test1234!th!@#123th123!@#tianhu@123tj@123456tl!@#123ts123!@#Ts123456Tt123456ty123!@#
  • user@123User@123U_tywg_2008uv123!@#
  • vice_!!1433vice_!_@_1433@VICE_1433vp123!@#
  • Welcome01Welcome@1Welcome1welcome@123Welcome@123Welcome123west@999west999@wlgwh123!@#win@2008Windows1windows@123Windows123windows@2008Windows@2008Windows2008Woaini123woaini520...Wq123456wr123!@#@WSX2wsx@WSXcde3wt123!@#wt@123456ww123!@#Ww123456www.123.comwww.126.comwww.163.comwww.51idc.com
  • xf123!@#xin520!@#xm@123456Xw66056068Xx123456
  • Yb123456yh123!@#yh@123456ytt4628,,,ywqn2015$yx@123456Yy123456yz@123456
  • Zaq12wsxzaq1@WSXzaq1XSW@zaq1XSW2zaq1ZAQ!ZAQ!2wsxzaq!@#456zeidc!@#123zh@123456zHang(#!!@(zl123!@#zt@123456Zx123456zxasqw12!@zxc!@#123zxc123!@#zxc123#@!ZXC!@#123zxcvbnm,./123zXJl@mwZZz123456