in the example at spec: - "name" indentation is wrong - also action should be specified as in API example connPoolStats should be actually "CONN_POOL_STATS" (with underscores, seems they disappear here when I post) - at inheritedRoles there is no "role" as child field, should be database a correct manifest would be: apiVersion: atlas.mongodb.com/v1 kind: AtlasCustomRole metadata: name: tester namespace: tester labels: {} annotations: mongodb.com/atlas-resource-policy: keep spec: projectRef: name: tester namespace: tester role: name: tester actions: - name: CONN_POOL_STATS resources: - cluster: true database: tester-database collection: tester-collection inheritedRoles: - name: operator-role-1 database: tester-database