(DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose (#166)

JuliaMongo · mongodb-docs · web-flow · commit 6d41699db957 · 2021-11-23T12:23:35.000-05:00
* (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * Fixing the path to the nodeJS examples * Include copy review * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * Minor change to run the build * Fixing the path to the nodeJS examples * Trying to fix the path to the node JS examples in the makefile * Trying to fix the path to the node JS examples in the makefile * Removing the node.js example as it is not used * fixing the merge * Edits, still * Edits, still * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * Minor change to run the build * Fixing the path to the nodeJS examples * Trying to fix the path to the node JS examples in the makefile * Trying to fix the path to the node JS examples in the makefile * Removing the node.js example as it is not used * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * (DOCSP-19581) Updates to Oplog user permissions for Live Migration from Compose * Fixing the path to the nodeJS examples * Include copy review * Edits, still * Edits, still * tech review --adding comments from Mamoona and Marie * tech review --adding comments from Mamoona and Marie * tech review --adding comments from Mamoona and Marie * tech review --adding comments from Mamoona and Marie * Tech review from Mamoona Co-authored-by: mongodb-docs <mongodb-docs@mongodbdocs-VirtualBox>
diff --git a/Makefile b/Makefile
@@ -60,7 +60,6 @@ examples:
 	curl -SfL https://raw.githubusercontent.com/mongodb/mongo-ruby-driver/master/spec/integration/change_stream_examples_spec.rb -o ${DRIVERS_PATH}/change_stream_examples_spec.rb
 	curl -SfL https://raw.githubusercontent.com/mongodb/mongo-scala-driver/master/driver/src/it/scala/org/mongodb/scala/DocumentationExampleSpec.scala -o ${DRIVERS_PATH}/DocumentationExampleSpec.scala
 	curl -SfL https://raw.githubusercontent.com/mongodb/mongo-csharp-driver/master/tests/MongoDB.Driver.Examples/DocumentationExamples.cs -o ${DRIVERS_PATH}/DocumentationExamples.cs
-	curl -SfL https://raw.githubusercontent.com/mongodb/node-mongodb-native/master/test/examples/change_streams.js -o ${DRIVERS_PATH}/ChangeStreamNodeExamples.js
 	curl -SfL https://raw.githubusercontent.com/mongodb/mongo-csharp-driver/master/tests/MongoDB.Driver.Examples/ChangeStreamExamples.cs -o ${DRIVERS_PATH}/ChangeStreamExamples.cs
 	#curl -SfL https://raw.githubusercontent.com/mongodb/mongo-c-driver/master/tests/test-mongoc-sample-commands.c -o ${DRIVERS_PATH}/test-mongoc-sample-commands.c
 	curl -SfL https://raw.githubusercontent.com/mongodb/mongo-go-driver/master/examples/documentation_examples/examples.go -o ${DRIVERS_PATH}/examples.go	
@@ -76,7 +75,6 @@ examples:
 	cp examples/go/connect/connect.go ${DRIVERS_PATH}/connect.go
 	cp examples/motor/connect/connect.py  ${DRIVERS_PATH}/motorconnect.py
 	cp examples/python/connect/connecttest.py  ${DRIVERS_PATH}/connecttest.py
-	cp examples/node/connect/connect.js  ${DRIVERS_PATH}/connect.js
 	cp examples/java/ConnectExample.java ${DRIVERS_PATH}/JavaConnectExample.java
 	cp examples/java/ConnectExampleLegacy.java ${DRIVERS_PATH}/JavaConnectExampleLegacy.java
 
diff --git a/source/includes/migration-pr-compose.rst b/source/includes/migration-pr-compose.rst
@@ -53,11 +53,16 @@
 
      mongo <mongodb-connection-string> -u <mongodb-username> -p --authenticationDatabase admin
 
-* The database user from your source cluster that you will use to perform the migration has the required MongoDB roles.
+* The database user from your source cluster that you will use to perform
+  the migration has the required MongoDB roles.
    
-  The user must have the :authrole:`clusterMonitor` and :authrole:`backup` roles. To verify
-  that the database user that you intend to use for migration has the appropriate
-  roles, run the :manual:`db.getUser() </reference/method/db.getUser/>` command against the admin database.
+  - The :authrole:`readAnyDatabase` role.
+  - The :authrole:`clusterMonitor` role.
+  - The :authrole:`backup` role.
+  
+  To verify that the database user that will run the Live Migration
+  process has these roles, run the :manual:`db.getUser()
+  </reference/method/db.getUser/>` command on the ``admin`` database.
 
   .. code-block:: javascript
 
@@ -76,5 +81,20 @@
            "role" : "clusterMonitor",
            "db" : "admin"
          }
+         {
+           "role" : "readAnyDatabase",
+           "db" : "admin"
+         }
        ]
      } ...
+  
+  In addition, the database user from your source cluster in Compose
+  must have the role to read the oplog on your ``admin`` database. See
+  :atlas:`Oplog Access </reference/atlas-oplog/>`. You obtain access to
+  this role when you add the oplog user in Compose in the following
+  procedure.
+  If you can't grant all of these permissions to the database user from
+  your source cluster in Compose, the Live Migration process will not work.
+  In this case, use :atlas:`mongodump and mongorestore </import/mongorestore/>`
+  to migrate your data to Atlas.
+
diff --git a/source/includes/steps-migrate-compose.yaml b/source/includes/steps-migrate-compose.yaml
@@ -22,18 +22,29 @@ content: |
 title: Create an oplog user
 ref: create-oplog-reader
 content: |
-  To perform the migration process, you need a database user with
-  permission to read the oplog on your ``admin`` database. Click the
-  :guilabel:`Add-ons` link in the left-side navigation. If you don't
-  have the :guilabel:`Oplog Access` add-on, add it with the
-  :guilabel:`Add` button.
 
-  If you already have the :guilabel:`Oplog Access` add-on, click
-  :guilabel:`Configure` to see the oplog user username and password.
-  You'll need them both in subsequent migration steps.
+  a. Click the :guilabel:`Add-ons` link in the left-side navigation. If
+     you don't have the :guilabel:`Oplog Access` add-on, add it with the
+     :guilabel:`Add` button.
 
+  #. If you already have the :guilabel:`Oplog Access` add-on, click
+     :guilabel:`Configure` to see the oplog user username and password.
+     
   .. figure:: /images/compose-oplog-addon.png
      :figwidth: 700px  
+
+  To perform the migration process, the oplog user must have
+  the following privileges:
+
+  - The :authrole:`readAnyDatabase` role.
+  - The :authrole:`clusterMonitor` role.
+  - The :authrole:`backup` role.
+  
+  If you can't grant these permissions to the oplog user,
+  the Live Migration process will not work. In this case, use
+  :atlas:`mongodump and mongorestore </import/mongorestore/>` to migrate
+  your data to Atlas.
+
 ---
 title: Begin the Atlas Live Migration process
 ref: begin-live-migration
