There are two different generic user roles that we can specify:

• read: A read-only role across non-system collections and the following system collections: system.indexes, system.js, and system.namespaces collections

• readWrite: A read and modify role across non-system collections and the system.js collection