dropRole (original) (raw)

dropRole

Deletes a user-defined role from the database on which you run the command.

Tip

In mongosh, this command can also be run through the db.dropRole() helper method.

Helper methods are convenient for mongosh users, but they may not return the same level of information as database commands. In cases where the convenience is not needed or the additional return fields are required, use the database command.

This command is available in deployments hosted in the following environments:

• MongoDB Atlas: The fully managed service for MongoDB deployments in the cloud

Important

This command is not supported in M0, M2, M5, M10+, and Flex clusters. For more information, see Unsupported Commands.

• MongoDB Enterprise: The subscription-based, self-managed version of MongoDB
• MongoDB Community: The source-available, free-to-use, and self-managed version of MongoDB

The command has the following syntax:

db.runCommand(

   {

     dropRole: "<role>",

     writeConcern: { <write concern> },

     comment: <any>

   }

)

The command has the following fields:

When a role is dropped on a mongod, previously authenticated users remain logged in to the database but immediately lose the role's privileges.

When a role is dropped on a mongos, previously authenticated users remain logged in to the database but lose the role's privileges when the cache refreshes. The cache refreshes automatically after the time specified with theuserCacheInvalidationIntervalSecs parameter or manually when you run the invalidateUserCache command.

You must have the dropRole action on a database to drop a role from that database.

The following operations remove the readPrices role from theproducts database:

use products

db.runCommand(

   {

     dropRole: "readPrices",

     writeConcern: { w: "majority" }

   }

)