Skip to main content
AccessOwl integrates with MongoDB Atlas to provision and deprovision user access in your Atlas organization.

​
Capabilities

Provisioning

AccessOwl creates user accounts with the specified roles/permissions during access requests.

Deprovisioning

AccessOwl removes users from the Atlas organization during access revocations.

​
Prerequisites

  • Organization Owner access to your Atlas organization, so you can invite the integration account.

​
Setup

1

Add MongoDB Atlas in AccessOwl

Either add a new application or open Applications and click the +-symbol, then continue.
2

Invite the integration account as Organization Owner

AccessOwl shows you the integration account’s email address. In MongoDB Atlas:
  • Select your organization from the Organizations menu in the navigation bar.
  • Click Applications in the sidebar under the Identity & Access section.
  • Click Invite Users.
  • Enter the integration account’s email address, then press Enter.
  • Open the role dropdown and select Organization Owner.
  • Click Add Users to Organization.
The integration account needs the Organization Owner role because that is the only organization role in Atlas with privileges to add, modify, and remove users across the organization. Invitations expire after 30 days if not accepted.

​
FAQ

When AccessOwl provisions a user, the integration account sends them an invitation to your Atlas organization. Until the user accepts it, they show as invited rather than as a full member. If a provisioning request shows as completed in AccessOwl but the user is not yet an active member in Atlas, they haven’t accepted the invitation yet. Invitations expire after 30 days.
AccessOwl manages membership of the Atlas organization and the organization roles assigned to it. Access to individual projects and clusters is granted inside Atlas.