in src/mongo/db/auth/authz_manager_external_state_local.cpp there is the error log message:

error() << "Could not generate role graph from admin.system.roles; "
                    "only system roles available. TODO EXPLAIN REMEDY. " << status;

We should remove the TODO and make the error message more useful.