Map-Reduce on `system.profile` collection
So it seems special readWrite privileges are needed to execute mapReduce on system.profile collection. So I got the query to work eventually after checking through:
https://docs.mongodb.com/manual/tutorial/manage-users-and-roles/