MongoDB Cloud Manager 83 backup agent, Ops Manager 84 backup agent, or to use mongodump to back up an entire mongod instance. 

Provides the following actions (page 419) on the mms.backup collection in the admin database: 

• insert (page 419) 

• update (page 419) 

Provides the listDatabases (page 423) action on the cluster as a whole. 

Provides the listCollections (page 423) action on all databases. 

Provides the listIndexes (page 423) action for all collections. 

Provides the find (page 419) action on the following: 

•all non -system collections in the cluster 

•all the following system collections in the cluster: system.indexes (page 291), system.namespaces (page 291), and system.js (page 291) 

•the admin.system.users (page 291) and admin.system.roles (page 291) collections 

•legacy system.users collections from versions of MongoDB prior to 2.6 

To back up the system.profile (page 291) collection, which is created when you activate database pro- filing (page 215), you must have additional read access on this collection. Several roles provide this access, including the clusterAdmin (page 408) and dbAdmin (page 406) roles. 

## restore 

Provides minimal privileges needed for restoring data from backups. This role provides sufficient privileges to use the mongorestore tool to restore an entire mongod instance. 

Provides the following actions on all non -system collections and system.js (page 291) collections in the cluster; on the admin.system.users (page 291) and admin.system.roles (page 291) collections in the admin database; and on legacy system.users collections from versions of MongoDB prior to 2.6: 

• collMod (page 422) 

• createCollection (page 419) 

• createIndex (page 420) 

• dropCollection (page 420) 

• insert (page 419) 

Provides the listCollections (page 423) action on all databases. 

Provides the following additional actions on admin.system.users (page 291) and legacy system.users collections: 

• find (page 419) 

• remove (page 419) 

• update (page 419) 

Provides the find (page 419) action on all the system.namespaces (page 291) collections in the cluster. 

Although, restore (page 411) includes the ability to modify the documents in the admin.system.users (page 291) collection using normal modification operations, only modify these data using the user management methods . 

