Detections
Analytics

3.5 Review Superuser/Admin Roles

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Roles provide several advantages that make it easier to manage privileges in a database system. Security administrators can control access to their databases in a way that mirrors the structure of their organizations (they can create roles in the database that map directly to the job functions in their organizations). The assignment of privileges is simplified. Instead of granting the same set of privileges to each individual user in a particular job function, the administrator can grant this set of privileges to a role representing that job function and then grant that role to each user in that job function.

Rationale:

Reviewing the Superuser/Admin roles within a database helps minimize the possibility of privileged unwanted access.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

To remove a user from one or more roles on the current database.

See Also

https://workbench.cisecurity.org/benchmarks/15678

Item Details

References: CSCv7|4.3, CSCv7|16.8

Plugin: MongoDB

Control ID: 62c34348ff6655c8887c0d65636e09841565f90c3d44061bd5ec3c5cf98e3707