<section>
 <h1 class="contains-headerlink leafygreen-ui-41fr9s" weight="medium">
  Enable Access Control on Self-Managed Deployments
  <a class="headerlink leafygreen-ui-1kepx47" href="#enable-access-control-on-self-managed-deployments" title="Permalink to this heading">
   <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
    <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
    </path>
    <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
    </path>
   </svg>
   <div class="css-1btu0w3 evvkmar0" id="enable-access-control-on-self-managed-deployments">
   </div>
  </a>
 </h1>
 <div class="leafygreen-ui-a5yxub">
  <p class="css-1cmx2d4 ef7gu8j0">
   On this page
  </p>
  <ul class="css-1qb0mst ef7gu8j1">
   <li class="leafygreen-ui-1e7a0ei">
    <a class="lg-ui-0001 leafygreen-ui-e98ikf" href="#access-control-resources" target="_self">
     <span>
      Access Control Resources
     </span>
    </a>
   </li>
   <li class="leafygreen-ui-1jqtqlb">
    <a class="lg-ui-0001 leafygreen-ui-cpmeq5" href="#next-steps" target="_self">
     <span>
      Next Steps
     </span>
    </a>
   </li>
  </ul>
 </div>
 <div class="leafygreen-ui-15mdk4" role="note">
  <h2 class="leafygreen-ui-6n7b7d">
   Note
  </h2>
  <div class="leafygreen-ui-9mycqc">
   <p class="leafygreen-ui-1kp3ins">
    Starting in MongoDB 8.0, LDAP authentication and authorization is
deprecated. LDAP is available and will continue to operate without
changes throughout the lifetime of MongoDB 8. LDAP will be removed in a
future major release.
   </p>
   <p class="leafygreen-ui-1kp3ins">
    For details, see
    <a class="leafygreen-ui-tqgtui" href="/docs/manual/core/LDAP-deprecation/#std-label-ldap-deprecation">
     LDAP Deprecation.
    </a>
   </p>
  </div>
 </div>
 <p class="leafygreen-ui-1kp3ins">
  Enabling access control on a MongoDB deployment enforces authentication.
With access control enabled, users are required to identify themselves
and can only perform actions that adhere to the permissions granted by
the roles assigned to their user.
 </p>
 <a class="css-53dzkk" href="https://www.mongodb.com/docs/atlas/atlas-ui-authentication/">
  <div class="css-z0l49d">
   <div class="css-fw7ipj">
    <svg aria-label="Cloud Icon" class="leafygreen-ui-1t2jgtk" fill="none" height="16" role="img" viewbox="0 0 16 16" width="16" xmlns="http://www.w3.org/2000/svg">
     <path d="M12.571 8.143c0 1.775-.899 3.34-2.267 4.264l-.014.01a5.12 5.12 0 0 1-2.861.869H2.857a2.857 2.857 0 0 1-.545-5.663 5.144 5.144 0 0 1 10.26.52ZM13.821 8.143a6.38 6.38 0 0 1-2.358 4.96 3.429 3.429 0 1 0 2.17-6.506c.123.494.188 1.013.188 1.546Z" fill="currentColor">
     </path>
    </svg>
   </div>
   <p class="leafygreen-ui-1kp3ins">
    You can
    <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas/atlas-ui-authentication/" target="_self">
     <span>
      configure authentication in the UI
     </span>
    </a>
    for deployments hosted in
    <a class="lg-ui-0001 leafygreen-ui-fgcsv5" href="https://www.mongodb.com/docs/atlas?tck=docs_server" target="_self">
     <span>
      MongoDB Atlas.
     </span>
    </a>
   </p>
  </div>
 </a>
 <div class="leafygreen-ui-15mdk4" role="note">
  <h2 class="leafygreen-ui-6n7b7d">
   Note
  </h2>
  <div class="leafygreen-ui-9mycqc">
   <p class="leafygreen-ui-1kp3ins">
    You can't disable access control in MongoDB Atlas.
   </p>
  </div>
 </div>
 <section>
  <h2 class="contains-headerlink leafygreen-ui-19f71ei" weight="medium">
   Access Control Resources
   <a class="headerlink leafygreen-ui-1kepx47" href="#access-control-resources" title="Permalink to this heading">
    <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
     <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
     </path>
     <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
     </path>
    </svg>
    <div class="css-1btu0w3 evvkmar0" id="access-control-resources">
    </div>
   </a>
  </h2>
  <p class="leafygreen-ui-1kp3ins">
   If you would like to enable access control for a standalone MongoDB
instance, please refer to one of the following resources:
  </p>
  <ul class="leafygreen-ui-rioki0">
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-scram-client-authentication/">
      Use SCRAM to Authenticate Clients on Self-Managed Deployments
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-x509-client-authentication/">
      Use x.509 Certificates to Authenticate Clients on Self-Managed Deployments
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/control-access-to-mongodb-with-kerberos-authentication/">
      Configure Self-Managed MongoDB with Kerberos Authentication on Linux
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication/">
      Configure Self-Managed MongoDB with Kerberos Authentication on Windows
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/kerberos-auth-activedirectory-authz/">
      Configure Self-Managed MongoDB with Kerberos Authentication and Active Directory Authorization
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ldap-sasl-activedirectory/">
      Authenticate Using Self-Managed SASL and LDAP with ActiveDirectory
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ldap-sasl-openldap/">
      Authenticate Using Self-Managed SASL and LDAP with OpenLDAP
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/authenticate-nativeldap-activedirectory/">
      Authenticate and Authorize Users Using Self-Managed Active Directory with Native LDAP
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-oidc/">
      Configure Self-Managed MongoDB with OpenID Connect
     </a>
    </p>
   </li>
  </ul>
  <p class="leafygreen-ui-1kp3ins">
   If you would like to enable access control for a
   <a class="leafygreen-ui-tqgtui" href="/docs/manual/replication/">
    replica set
   </a>
   or a
   <a class="leafygreen-ui-tqgtui" href="/docs/manual/sharding/#std-label-sharding-sharded-cluster">
    sharded cluster
   </a>
   , please refer to
one of the following resources:
  </p>
  <ul class="leafygreen-ui-rioki0">
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/deploy-replica-set-with-keyfile-access-control/">
      Deploy Self-Managed Replica Set With Keyfile Authentication
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-replica-set/">
      Update Self-Managed Replica Set to Keyfile Authentication
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-replica-set-without-downtime/">
      Update Self-Managed Replica Set to Keyfile Authentication (No Downtime)
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/deploy-sharded-cluster-with-keyfile-access-control/">
      Deploy Self-Managed Sharded Cluster with Keyfile Authentication
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-sharded-cluster/">
      Update Self-Managed Sharded Cluster to Keyfile Authentication
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/enforce-keyfile-access-control-in-existing-sharded-cluster-no-downtime/">
      Update Self-Managed Sharded Cluster to Keyfile Authentication (No Downtime)
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/control-access-to-mongodb-with-kerberos-authentication/">
      Configure Self-Managed MongoDB with Kerberos Authentication on Linux
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/control-access-to-mongodb-windows-with-kerberos-authentication/">
      Configure Self-Managed MongoDB with Kerberos Authentication on Windows
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/kerberos-auth-activedirectory-authz/">
      Configure Self-Managed MongoDB with Kerberos Authentication and Active Directory Authorization
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ldap-sasl-activedirectory/">
      Authenticate Using Self-Managed SASL and LDAP with ActiveDirectory
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/configure-ldap-sasl-openldap/">
      Authenticate Using Self-Managed SASL and LDAP with OpenLDAP
     </a>
    </p>
   </li>
   <li class="leafygreen-ui-d7p7b6">
    <p class="leafygreen-ui-1kp3ins">
     <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/authenticate-nativeldap-activedirectory/">
      Authenticate and Authorize Users Using Self-Managed Active Directory with Native LDAP
     </a>
    </p>
   </li>
  </ul>
 </section>
 <section>
  <h2 class="contains-headerlink leafygreen-ui-19f71ei" weight="medium">
   Next Steps
   <a class="headerlink leafygreen-ui-1kepx47" href="#next-steps" title="Permalink to this heading">
    <svg aria-label="Link Icon" class="leafygreen-ui-a30zj9" fill="none" height="12" role="img" viewbox="0 0 16 16" width="12" xmlns="http://www.w3.org/2000/svg">
     <path d="M6.039 9.953a3.596 3.596 0 0 1-.327-.38l1.45-1.445a1.553 1.553 0 0 0 2.496.423l2.885-2.87a1.57 1.57 0 0 0 .01-2.213 1.553 1.553 0 0 0-2.203-.01l-.379.377A.995.995 0 0 1 8.56 3.83a1.005 1.005 0 0 1 .006-1.418l.38-.377a3.542 3.542 0 0 1 5.024.023 3.58 3.58 0 0 1-.022 5.047l-2.884 2.871a3.542 3.542 0 0 1-5.025-.022Z" fill="currentColor">
     </path>
     <path d="M9.961 6.047c.12.12.228.248.327.38l-1.45 1.445a1.553 1.553 0 0 0-2.496-.423l-2.885 2.87a1.57 1.57 0 0 0-.01 2.213 1.553 1.553 0 0 0 2.203.01l.379-.377a.995.995 0 0 1 1.411.006 1.005 1.005 0 0 1-.006 1.418l-.38.377a3.542 3.542 0 0 1-5.024-.023 3.58 3.58 0 0 1 .022-5.047l2.884-2.871a3.542 3.542 0 0 1 5.025.022Z" fill="currentColor">
     </path>
    </svg>
    <div class="css-1btu0w3 evvkmar0" id="next-steps">
    </div>
   </a>
  </h2>
  <p class="leafygreen-ui-1kp3ins">
   To create additional users, see
   <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/create-users/">
    Create a User on Self-Managed Deployments.
   </a>
  </p>
  <p class="leafygreen-ui-1kp3ins">
   To manage users, assign roles, and create custom roles, see
   <a class="leafygreen-ui-tqgtui" href="/docs/manual/tutorial/manage-users-and-roles/">
    Manage Users and Roles on Self-Managed Deployments.
   </a>
  </p>
 </section>
</section>
