Dropping admin.system.new_users collection

Did you try with __system internal role or a custom role with any Action on any Resource?