Database User Roles
read
- read data on all "non-system" collections
- granted actions
- changeStream
- collStats
- dbHash
- dbStats
- find
- killCursors
- listIndexes
- listCollections
readWrite
- all the privileges of read (above)
- includes data modification rights
- convertToCapped
- createCollection
- dropCollection
- createIndex
- dropIndex
- insert
- remove
- renameCollectionSameDB
- update