Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
assertOnlyReadAllowed(role, TransformInternalIndexConstants.AUDIT_INDEX_READ_ALIAS);
            assertOnlyReadAllowed(role, TransformInternalIndexConstants.AUDIT_INDEX_PATTERN);
            assertOnlyReadAllowed(role, TransformInternalIndexConstants.AUDIT_INDEX_PATTERN_DEPRECATED);
            assertNoAccessAllowed(role, "foo");
            assertNoAccessAllowed(role, TransformInternalIndexConstants.LATEST_INDEX_NAME);
            assertNoAccessAllowed(role, TestRestrictedIndices.SAMPLE_RESTRICTED_NAMES);
            assertNoAccessAllowed(role, XPackPlugin.ASYNC_RESULTS_INDEX + randomAlphaOfLengthBetween(0, 2));
            assertThat(
                role.application()
                    .grants(ApplicationPrivilegeTests.createPrivilege(kibanaApplicationWithRandomIndex, "app-foo", "foo"), "*"),
                is(false)
            );
            if (roleDescriptor.getName().equals("data_frame_transforms_user")) {
                assertThat(
                    role.application()
                        .grants(
                            ApplicationPrivilegeTests.createPrivilege(
                                kibanaApplicationWithRandomIndex,
                                "app-reserved_ml",
                                allowedApplicationActionPattern
                            ),
                            "*"
                        ),
                    is(true)
                );
            }
            final String otherApplication = "logstash-" + randomAlphaOfLengthBetween(8, 24);
            assertThat(
                role.application().grants(ApplicationPrivilegeTests.createPrivilege(otherApplication, "app-foo", "foo"), "*"),
                is(false)