### Elasticsearch Version

8.0

The built-in `remote_monitoring_user` has [remote_monitoring_agent, remote_monitoring_collector] roles, which can't perform a rollover on metricbeat indices.

`
[org.elasticsearch.xpack.ilm.IndexLifecycleRunner] [instance-0000000001] policy [metricbeat] for index [metricbeat-7.15.2-2022.01.24-000001] failed on step [{"phase":"hot","action":"rollover","name":"check-rollover-ready"}]. Moving to ERROR step
org.elasticsearch.ElasticsearchSecurityException: action [indices:admin/rollover] is unauthorized for user [remote_monitoring_user] with roles [remote_monitoring_agent,remote_monitoring_collector] on indices [metricbeat-7.15.2,metricbeat-7.15.2-2022.01.24-000001], this action is granted by the index privileges [manage_follow_index,manage,all]
`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
assertOnlyReadAllowed(role, "apm-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "traces-apm." + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "filebeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "metricbeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "heardbeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "kibana_sample_data_-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, ".siem-signals-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, ".alerts-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, ".preview.alerts-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, ".lists-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, ".items-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "apm-" + randomIntBetween(0, 5) + "-transaction-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "logs-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "auditbeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "filebeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "packetbeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "winlogbeat-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "endgame-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, randomAlphaOfLength(5));
        assertNoAccessAllowed(role, TestRestrictedIndices.SAMPLE_RESTRICTED_NAMES);
        assertNoAccessAllowed(role, "." + randomAlphaOfLengthBetween(6, 10));
        assertNoAccessAllowed(role, "ilm-history-" + randomIntBetween(0, 5));
        
        assertThat(role.application().grants(new ApplicationPrivilege("kibana-.kibana", "kibana-read", "read"), "*"), is(true));
        assertThat(role.application().grants(new ApplicationPrivilege("kibana-.kibana", "kibana-all", "all"), "*"), is(false));
        assertThat(role.runAs().check(randomAlphaOfLengthBetween(1, 20)), is(false));
    }
    public void testPredefinedEditorRole() {
        final TransportRequest request = mock(TransportRequest.class);
        final Authentication authentication = AuthenticationTestHelper.builder().build();