Permissions

:GRANT permission ON Entity TO user

:GRANT READ ON User TO analyst

:GRANT WRITE ON Order TO sales_app

:GRANT DELETE ON Log TO admin

:GRANT ALL ON User TO admin

:GRANT READ, WRITE, DELETE ON Order TO app_service

:GRANT READ ON * TO analyst

:REVOKE permission ON Entity FROM user

:REVOKE DELETE ON User FROM intern

:REVOKE ALL ON User FROM former_employee

:CREATE USER john WITH PASSWORD secret123

:ALTER USER john WITH PASSWORD newsecret456

:DROP USER john

:CREATE ROLE analyst

:ASSIGN ROLE analyst TO john

:REVOKE ROLE analyst FROM john

:DROP ROLE analyst

:CREATE ROLE analyst
:GRANT READ ON User TO analyst
:GRANT READ ON Order TO analyst
:GRANT READ ON Product TO analyst

:CREATE USER jane WITH PASSWORD analyst123
:ASSIGN ROLE analyst TO jane

:CREATE ROLE app_service
:GRANT READ, WRITE ON User TO app_service
:GRANT READ, WRITE ON Order TO app_service
:GRANT READ, WRITE ON Product TO app_service

:CREATE USER myapp WITH PASSWORD service456
:ASSIGN ROLE app_service TO myapp

:CREATE ROLE admin
:GRANT ALL ON User TO admin
:GRANT ALL ON Order TO admin
:GRANT ALL ON Product TO admin

:CREATE USER bob WITH PASSWORD admin789
:ASSIGN ROLE admin TO bob

// MongoDB equivalent for CREATE USER
db.createUser({
  user: "analyst",
  pwd: "secret",
  roles: [{ role: "read", db: "myapp" }]
});