Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
)
                    .toList()
            )
        );
        final Role role2 = createSimpleRoleWithRemoteIndices(shuffledPermissions);
        final RBACAuthorizationInfo authorizationInfo2 = mock(RBACAuthorizationInfo.class);
        when(authorizationInfo2.getRole()).thenReturn(role2);
        final PlainActionFuture<RoleDescriptorsIntersection> future2 = new PlainActionFuture<>();
        engine.getRoleDescriptorsIntersectionForRemoteCluster(concreteClusterAlias, authorizationInfo2, future2);
        final RoleDescriptorsIntersection actual2 = future2.get();
        assertThat(actual1, equalTo(actual2));
        assertThat(actual1.roleDescriptorsList().iterator().next().iterator().next().getIndicesPrivileges().length, equalTo(numGroups));
    }
    public void testGetRoleDescriptorsIntersectionForRemoteClusterWithoutMatchingGroups() throws ExecutionException, InterruptedException {
        assumeTrue("untrusted remote cluster feature flag must be enabled", TcpTransport.isUntrustedRemoteClusterEnabled());
        final String concreteClusterAlias = randomAlphaOfLength(10);
        final Role role = createSimpleRoleWithRemoteIndices(
            RemoteIndicesPermission.builder()
                .addGroup(
                    Set.of(concreteClusterAlias),
                    IndexPrivilege.READ,
                    new FieldPermissions(new FieldPermissionsDefinition(null, null)),
                    null,
                    randomBoolean(),
                    generateRandomStringArray(3, 10, false, false)
                )
                .build()
        );
        final RBACAuthorizationInfo authorizationInfo = mock(RBACAuthorizationInfo.class);
        when(authorizationInfo.getRole()).thenReturn(role);