add user to mongodb via python

Question

I want to be able to add users to MongoDB so that we can automate MongoDB installs with authentication already baked in. I can successfully add users using pymongo that are read only or are dbOwner by doing this:

from pymongo import MongoClient

client = MongoClient('localhost:27017')   
client.admin.authenticate('siteRootAdmin', 'Test123')
client.testdb.add_user('newTestUser', 'Test123', True)

but when I do this following code block to specify roles, it fails:

from pymongo import MongoClient

client = MongoClient('localhost:27017')
client.admin.authenticate('siteRootAdmin', 'Test123')
client.testdb.add_user('newTestUser', 'Test123', False, 'readWrite')

with the error:

line 10, in <module>
    client.admin.add_user('newTestUser', 'Test123', False, 'readWrite')
TypeError: add_user() takes at most 4 arguments (5 given)

In the docs it implies that you are able to have optional fields for the user document such as other roles. Has anyone been able to set these correctly? Namely, I want to have readWrite service accounts that can add data to collections but don't have full dbOwner privileges.

ZZY · Accepted Answer · 2014-07-11 02:41:29Z

14

Here is the workaround:

client.testdb.add_user('newTestUser', 'Test123', roles=[{'role':'readWrite','db':'testdb'}])

Note: as you're going to set "roles", should leave the 3rd argument (read_only) empty.

answered Jul 11, 2014 at 2:41

ZZY

3,9871 gold badge22 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

rhealitycheck Over a year ago

thank you! that syntax for the roles is what i was messing up. i had tried roles = 'readWrite' but didn't notice that mongodb takes both the role and the db in there.

farthVader Over a year ago

@rhealitycheck: Actually according to the MongoDB shell syntax, "roles" should always be an array, it could also be roles=["readWrite"] as long as you make sure to run this command after selecting "testdb".

pitchblack408 Over a year ago

How do I get a result showing that is was successful or not?

John Hanley Over a year ago

This answer is no longer correct. add_user was deprecated in 3.6 and removed in 4.0. The replacement method command() is only available for M10 and larger clusters.

em2er · Accepted Answer · 2021-11-22 13:33:00Z

13

Starting from version 3 add_user is deprecated and will be removed in later versions. It cause following warning when called:

DeprecationWarning: add_user is deprecated and will be removed in PyMongo 4.0. Use db.command with createUser or updateUser instead

Above code might be rewritten to

client.testdb.command(
    'createUser', 'newTestUser', 
    pwd='Test123',
    roles=[{'role': 'readWrite', 'db': 'testdb'}]
)

answered Nov 22, 2021 at 13:33

em2er

8815 silver badges17 bronze badges

2 Comments

John Hanley Over a year ago

This answer is correct starting with pymongo 4.0. command() is only available for M10 and larger clusters.

Nigini Over a year ago

Hey @em2er - can you see why your answer is not working for me in this question: stackoverflow.com/q/76428469/539223

Collectives™ on Stack Overflow

add user to mongodb via python

2 Answers 2

4 Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related