--- title: DumboDB: Announcing RBAC Support | daily.dev description: DumboDB 0.4.0 introduces RBAC (role-based access control) and authentication, mirroring MongoDB's security model. The setup follows MongoDB's bootstrap... canonical: https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: DumboDB: Announcing RBAC Support | daily.dev og:description: DumboDB 0.4.0 introduces RBAC (role-based access control) and authentication, mirroring MongoDB's security model. The setup follows MongoDB's bootstrap... og:url: https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu og:image: https://api.daily.dev/og/posts/frf3KbobU.png og:image:alt: DumboDB: Announcing RBAC Support og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # DumboDB: Announcing RBAC Support **[DoltHub Blog](https://daily.dev/sources/dolthub-blog)** · 11 min read · 1 upvotes · 0 comments ## Summary DumboDB 0.4.0 introduces RBAC (role-based access control) and authentication, mirroring MongoDB's security model. The setup follows MongoDB's bootstrap approach: the server starts unauthenticated from localhost, allowing only first-user creation before locking down. Users can be assigned built-in roles like `readWrite` or custom roles with fine-grained collection-level privileges. A key differentiator is that the `admin` database — storing users and roles in `system.users` and `system.roles` collections — is fully version-controlled with auto-commit, providing a built-in audit log of all user and role changes. Passwords are stored as SCRAM salted hashes. Over 200 tests were added to ensure MongoDB RBAC compatibility. Upcoming work includes branch-level permissions and improved MongoDB application parity. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I create the first admin user in DumboDB when authentication is enabled? Start the server with the --auth flag, then connect from localhost with mongosh while unauthenticated; this temporary connection can only run db.createUser() to create the first user. That user must be given the root role under the admin database, or the server becomes unusable since no further users or permission changes can be made without authenticating first. _Teams standing up secure database instances follow bootstrap steps like this via daily.dev before going to production._ ### Does DumboDB support the same role-based access control system as MongoDB? Yes, DumboDB fully replicates MongoDB's RBAC system, including built-in roles like readWrite, custom role creation with db.createRole(), and fine-grained privilege scoping to specific collections and actions. Over 200 tests were added to verify parity, so existing systems built against MongoDB's RBAC should work unchanged against DumboDB. _Evaluating MongoDB-compatible databases? daily.dev keeps developers current on RBAC and compatibility changes._ ## Similar posts on daily.dev - [DumboDB: Announcing Replication V1](https://daily.dev/posts/dumbodb-announcing-replication-v1-gsfb5lcot) · DoltHub Blog · 4 upvotes · 0 comments - [DumboDB Supports MongoDB Compass](https://daily.dev/posts/dumbodb-supports-mongodb-compass-yw7xn2huo) · DoltHub Blog · 1 upvotes · 0 comments - [What Is Role-Based Access Control \(RBAC\)?](https://daily.dev/posts/what-is-role-based-access-control-rbac--ofppjlkdu) · Nordic APIs · 0 upvotes · 0 comments - [DumboDB: Does it Work?](https://daily.dev/posts/dumbodb-does-it-work--q0mhad20x) · DoltHub Blog · 12 upvotes · 1 comments - [Expanded Role-Based Access Control \(RBAC\) for Enterprise teams](https://daily.dev/posts/expanded-role-based-access-control-rbac-for-enterprise-teams-knjcacyhr) · Vercel · 23 upvotes · 0 comments --- Tags: [#backend](https://daily.dev/tags/backend), [#mongodb](https://daily.dev/tags/mongodb), [#version-control](https://daily.dev/tags/version-control) [View this post on daily.dev](https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"DumboDB: Announcing RBAC Support","url":"https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu"},"datePublished":"2026-08-11T21:00:03.171Z","dateModified":"2026-09-14T07:42:13.332Z","description":"DumboDB 0.4.0 introduces RBAC (role-based access control) and authentication, mirroring MongoDB's security model. The setup follows MongoDB's bootstrap...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b1ecad1d85e9adf5e456995d2f927834?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b1ecad1d85e9adf5e456995d2f927834?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"DoltHub Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"DoltHub Blog","logo":"https://media.daily.dev/image/upload/s--LXDlvjS4--/f_auto,q_auto/v1780213587/logos/dolthub-blog?_a=BAMAMiWQ0","url":"https://daily.dev/sources/dolthub-blog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"backend,mongodb,version-control","timeRequired":"PT11M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"DoltHub Blog","item":"https://daily.dev/sources/dolthub-blog"},{"@type":"ListItem","position":3,"name":"DumboDB: Announcing RBAC Support"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/dumbodb-announcing-rbac-support-frf3kbobu#faq","mainEntity":[{"@type":"Question","name":"How do I create the first admin user in DumboDB when authentication is enabled?","acceptedAnswer":{"@type":"Answer","text":"Start the server with the --auth flag, then connect from localhost with mongosh while unauthenticated; this temporary connection can only run db.createUser() to create the first user. That user must be given the root role under the admin database, or the server becomes unusable since no further users or permission changes can be made without authenticating first. Teams standing up secure database instances follow bootstrap steps like this via daily.dev before going to production."}},{"@type":"Question","name":"Does DumboDB support the same role-based access control system as MongoDB?","acceptedAnswer":{"@type":"Answer","text":"Yes, DumboDB fully replicates MongoDB's RBAC system, including built-in roles like readWrite, custom role creation with db.createRole(), and fine-grained privilege scoping to specific collections and actions. Over 200 tests were added to verify parity, so existing systems built against MongoDB's RBAC should work unchanged against DumboDB. Evaluating MongoDB-compatible databases? daily.dev keeps developers current on RBAC and compatibility changes."}}]} ```