Atlas error: not authorized on admin to execute command

TL;DR

For "MongoServerError: not authorized on admin to execute command { [command] }": for one-off admin work, use a separate admin user instead of widening the app user. Re-run the exact failing command.

MongoServerError: not authorized on admin to execute command { [command] }

Steps

1. Widen deliberately to the role the command needs, per the built-in roles table. Do not jump straight to atlasAdmin for an app service; grant the narrow role and retest. For one-off admin work, use a separate admin user instead of widening the app user.
2. Re-run the exact failing command. It should succeed, and a command you intentionally left out of scope should still fail. That confirms the boundary is where you think it is.

When to use

You are seeing this: Widen deliberately to the role the command needs, per the built-in roles table. Use this skill when you run into "Atlas error: not authorized on admin to execute command".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Authorization error semantics and the built-in role privilege mapping verified against https://www.mongodb.com/docs/manual/reference/built-in-roles/ on 2026-09-26.