The replication lag check for instance tries to run a find query on local.system.namespaces which mongo answers with
"errmsg" : "not authorized on local to execute command { find: \"system.namespaces\", filter: {}, …
The problem is most likely not authorization though, but deprecation (CMIIW).
See https://docs.mongodb.com/manual/reference/system-collections/#%3Cdatabase%3E.system.namespaces
The find query should be replaced by a call to listCollections which is covered by the clusterMonitor role.