Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
} else {
                assertThat(roleDescriptor.getMetadata(), not(hasEntry("_deprecated", true)));
            }
            final String allowedApplicationActionPattern = "example/custom/action/*";
            final String kibanaApplicationWithRandomIndex = "kibana-" + randomFrom(randomAlphaOfLengthBetween(8, 24), ".kibana");
            List<ApplicationPrivilegeDescriptor> lookup = roleDescriptor.getName().equals("data_frame_transforms_user")
                ? List.of(
                    new ApplicationPrivilegeDescriptor(
                        kibanaApplicationWithRandomIndex,
                        "reserved_ml_user",
                        Set.of(allowedApplicationActionPattern),
                        Map.of()
                    )
                )
                : List.of();
            Role role = Role.buildFromRoleDescriptor(roleDescriptor, new FieldPermissionsCache(Settings.EMPTY), RESTRICTED_INDICES, lookup);
            assertThat(role.cluster().check(DeleteTransformAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(GetTransformAction.NAME, request, authentication), is(true));
            assertThat(role.cluster().check(GetTransformStatsAction.NAME, request, authentication), is(true));
            assertThat(role.cluster().check(PreviewTransformAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(PutTransformAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(StartTransformAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(StopTransformAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(DelegatePkiAuthenticationAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(ActivateProfileAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(SuggestProfilesAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(UpdateProfileDataAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(GetProfilesAction.NAME, request, authentication), is(false));
            assertThat(role.cluster().check(ProfileHasPrivilegesAction.NAME, request, authentication), is(false));
            assertThat(role.runAs().check(randomAlphaOfLengthBetween(1, 30)), is(false));