配置mongodb.conf，注释掉bind_ip

 #bind_ip = 127.0.0.1   //注释此行

启用认证登陆

auth = true       //将此行前的注释去掉

mongo host:port/dbname -u user-p password --authenticationDatabase dbname 

mongo 127.0.0.1:27017/admin -u root -p 123456 --authenticationDatabase admin

use admin

db.shutdownServer()

db.auth("user","password")

show users // db.system.users.find()  

// 新建用户

// 超级用户 root

db.createUser({user: "root",pwd: "123456",roles: [ "root" ]})

// 用户管理权限 userAdminAnyDatabase

db.createUser({user:"userAdmin",pwd:"123456",roles:[{role:"userAdminAnyDatabase",db:"admin"}]})

// 数据库管理权限 dbAdminAnyDatabase

db.createUser({user:"dbAdmin",pwd:"123456",roles:[{role:"dbAdminAnyDatabase",db:"admin"}]})

// 数据读写用户 readWriteAnyDatabase

use test

db.createUser({user:"sa",pwd:"sa",roles:[{role:"readWrite",db:"test"}]})

// 已废弃的方法 相当于新建 { "user" : "root", "roles" : [ "dbOwner" ] }

// db.addUser("root","123456") 

// 修改密码 db.changeUserPassword("root", "root")

// 删除原用户 db.dropUser("test") // db.system.users.remove({user:"test"});

展示角色 show roles;

// 查看当前用户的权限 db.runCommand({usersInfo:"root",showPrivileges:true})

// 查看角色权限 db.getRole( "dbAdminAnyDatabase", { showPrivileges: true } )