At http://docs.mongodb.org/manual/reference/method/db.addUser/#db.addUser it says about roles in the table:

roles array Optional. An array of user roles.

But there is no statement about what happens if no roles are passed, or this field isn't present. I presume that means that it uses legacy auth?