created a user with clusterMonitor and dbOwner role, but db.getRoles() shows enableSharding role
You get that "role" : "enableSharding" for customerdb because of "role" : "dbAdmin". So, that use can shard customerdb, but nothing else.