MongoDB Atlas - User Guide

In this article, you will understand step by step how to easily integrate with MongoDB Atlas

Permissions for MongoDB Atlas Integration 

1. Organization Read Only

   This permission automates 5 out of 6 audit related monitors. It provides most of the automation capabilities. However, keep in mind that the "Organization Read Only" permission does not allow for the collection of organization settings, which is necessary for the remaining monitor (MFA enforcement in the organization settings) to fully automate this integration.

2. Organization Owner

   To achieve complete automation, the "Organization Owner" permission is required. This level of access enables data collection at the organization level, specifically for monitoring MFA enforcement in the organization settings. If you want to cover all aspects of this integration, granting "Organization Owner" permission is essential but it's not mandatory for the integration.

Prerequisites

1. Log into your MongoDB Atlas account as a Organization Owner. This role should possess the necessary permissions to create public and private keys. These keys are required to establish Scytale's connection.

How to Connect Scytale and MongoDB Atlas

1. Create your Public and Private Keys

1. In MongoDB, click on the access manager dropdown at the top.
2. From the organization menu, select "Access Manager".
3. Ensure that "organization access" is selected in the "Access Manager" dropdown.
4. Proceed to the "API Keys" tab.

5. In the top right corner, click on "Create API key".
6. Add a description of your choosing.

7. When enabling Organization Permissions, you have two options available:

• Organization read-only: This option automates 5 out of 6 monitors.
• Organization owner: This option provides full automation capabilities, but it is not mandatory to connect the integration.

Option 1:

OR

Option 2:

8. Click on the "Next" button.
9. Copy the Public Key and Private Key

2. Set up the connection in Scytale

1. In Scytale menu, navigate to the "integrations" page.
2. Click on Connect MongoDB Atlas.
3. Enter the Public and Private keys you created in step 1.
4. Add a name for the connection.
5. Click on Connect.

6. Select project - Select projects that are pertinent to the audit to ensure that evidence is automatically gathered exclusively from these selected projects.

Note: if you don't select projects, the connection will not be completed and Scytale cannot collect evidence.

7. Click confirm.

FAQs

1. How can I verify my role in MongoDB Atlas?
   
   In your account go to Organizations