在RAM中，可以对一个MongoDB资源进行以下Action的授权。
| Action | Action |
|---|---|
| CreateDBInstance | ModifyDBInstanceSpec |
| DeleteDBInstance | RenewDBInstance |
| CreateShardingDBInstance | DeleteNode |
| ModifyNodeSpec | CreateNode |
| RestartDBInstance | ModifyDBInstanceMaintainTime |
| ModifyDBInstanceDescription | DescribeDBInstanceAttribute |
| DescribeReplicaSetRole | DescribeShardingNetworkAddress |
| ModifyDBInstanceNetworkType | ModifyDBInstanceNetExpireTime |
| DescribeAccounts | ResetAccountPassword |
| DescribeSecurityIps | ModifySecurityIps |
| DescribeAuditRecords | DescribeAuditFiles |
| DescribeBackupPolicy | ModifyBackupPolicy |
| CreateBackup | DescribeBackups |
| RestoreDBInstance | DescribeDBInstancePerformance |
| DescribeDBInstances | - |
其中DescribeDBInstances，授权时必须对该用户全部实例授权。不需要鉴权的接口为DescribeRegions。