Currently this works:

use $external
db.addUser({ user: "spencer",
                      roles: ['userAdmin', 'readWrite']});

but the "readWrite@$external" role doesn't really make sense and doesn't actually allow you to do anything.