Writes to collections in the admin database imply taking an X lock on the entire database, rather than just the collection. This enforces serialization of writes between admin.system.users and admin.system.roles, and prevents the RoleGraph from being informed of multiple updates in parallel. The elevated strength of the locks prevents transactions from working on the admin database.