(DOCS-15778) Updates roles needed for 4 items (#1158)

Author: sarahsimpers

source/reference/k8s-operator-om-specification.txt

@@ -375,11 +375,14 @@ Optional |onprem| Resource Settings
 
    Name of the MongoDB user resource used to connect to the oplog store
    database. Deploy this user resource in the same
-   namespace as the |onprem| resource and with the
-   :manual:`readWriteAnyDatabase
-   </reference/built-in-roles/#readWriteAnyDatabase>` and
-   :manual:`dbAdminAnyDatabase
-   </reference/built-in-roles/#dbAdminAnyDatabase>` roles.
+   namespace as the |onprem| resource and with all of the following roles:
+   
+   - :manual:`readWriteAnyDatabase
+     </reference/built-in-roles/#readWriteAnyDatabase>`
+   - :manual:`dbAdminAnyDatabase
+     </reference/built-in-roles/#dbAdminAnyDatabase>`
+   - :manual:`clusterMonitor
+     </reference/built-in-roles/#mongodb-authrole-clusterMonitor>`
 
 .. opsmgrkube:: spec.backup.blockStores
 
@@ -434,11 +437,14 @@ Optional |onprem| Resource Settings
 
    Name of the MongoDB user resource used to connect to the blockstore
    database. Deploy this user resource in the same
-   namespace as the |onprem| resource and with the
-   :manual:`readWriteAnyDatabase
-   </reference/built-in-roles/#readWriteAnyDatabase>` and
-   :manual:`dbAdminAnyDatabase
-   </reference/built-in-roles/#dbAdminAnyDatabase>` roles.
+   namespace as the |onprem| resource and with all of the following roles:
+   
+   - :manual:`readWriteAnyDatabase
+     </reference/built-in-roles/#readWriteAnyDatabase>`
+   - :manual:`dbAdminAnyDatabase
+     </reference/built-in-roles/#dbAdminAnyDatabase>`
+   - :manual:`clusterMonitor
+     </reference/built-in-roles/#mongodb-authrole-clusterMonitor>`
 
 .. opsmgrkube:: spec.backup.queryableBackupSecretRef.name
 
@@ -1179,9 +1185,14 @@ You can use |tls| for both |s3| and your application database, or for
 
    Name of the MongoDB user resource used to connect to the metadata
    database of the |s3| oplog store. Deploy this user resource in the
-   same namespace as the |onprem| resource and with the
-   :manual:`readWriteAnyDatabase </reference/built-in-roles/#readWriteAnyDatabase>` and
-   :manual:`dbAdminAnyDatabase </reference/built-in-roles/#dbAdminAnyDatabase>` roles.
+   same namespace as the |onprem| resource and with all of the following roles:
+   
+   - :manual:`readWriteAnyDatabase
+     </reference/built-in-roles/#readWriteAnyDatabase>`
+   - :manual:`dbAdminAnyDatabase
+     </reference/built-in-roles/#dbAdminAnyDatabase>`
+   - :manual:`clusterMonitor
+     </reference/built-in-roles/#mongodb-authrole-clusterMonitor>`
 
    .. important::
 
@@ -1339,9 +1350,14 @@ You can use |tls| for both |s3| and your application database, or for
 
    Name of the MongoDB user resource used to connect to the metadata
    database of the |s3| snapshot store. Deploy this user resource in the
-   same namespace as the |onprem| resource and with the
-   :manual:`readWriteAnyDatabase </reference/built-in-roles/#readWriteAnyDatabase>` and
-   :manual:`dbAdminAnyDatabase </reference/built-in-roles/#dbAdminAnyDatabase>` roles.
+   same namespace as the |onprem| resource and with all of the following roles:
+   
+   - :manual:`readWriteAnyDatabase
+     </reference/built-in-roles/#readWriteAnyDatabase>`
+   - :manual:`dbAdminAnyDatabase
+     </reference/built-in-roles/#dbAdminAnyDatabase>`
+   - :manual:`clusterMonitor
+     </reference/built-in-roles/#mongodb-authrole-clusterMonitor>`
 
    .. important::