https://mms.mongodb.com/help-classic/reference/required-access-backup-agent/#mongodb-2-4

For a sharded cluster, we also require "readWrite" on the config database. Without it, we can't stop the balancer.

Also affects the equivalent OnPrem doc pages