Создать роль в local нельзя
> use local
switched to db local
> db.createRole({role:"custom",privileges: [ {resource: {db:"local",collection:"system.replset"}, actions: ["remove"] }], roles: []})
2020-04-29T15:08:36.079+0200 E QUERY [thread1] Error: Cannot create roles in the local database :
_getErrorWithCode@src/mongo/shell/utils.js:25:13
DB.prototype.createRole@src/mongo/shell/db.js:1702:1
@(shell):1:1
Нет смысла создавать ее в admin
>
use admin
switched to db admin
> db.createRole({role:"custom",privileges: [ {resource: {db:"local",collection:"system.replset"}, actions: ["remove"] }], roles: []})
{
"role" : "custom",
"privileges" : [
{
"resource" : {
"db" : "local",
"collection" : "system.replset"
},
"actions" : [
"remove"
]
}
],
"roles" : [ ]
}
Так как все равно нельзя на нее сослаться, делая юзера для базы local
> db.createUser({ user: "test_local", pwd: "test", roles: [{role: "custom", db: "local"}]})
2020-04-29T15:10:03.095+0200 E QUERY [thread1] Error: couldn't add user: No role named custom@local :
_getErrorWithCode@src/mongo/shell/utils.js:25:13
DB.prototype.createUser@src/mongo/shell/db.js:1437:15
@(shell):1:1