Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/main/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStore.java
RoleDescriptor.IndicesPrivileges.builder()
                    .indices("logs-cloud_security_posture.findings-*", "logs-cloud_security_posture.vulnerabilities-*")
                    .privileges("read", "view_index_metadata")
                    .build(),
                RoleDescriptor.IndicesPrivileges.builder()
                    .indices(
                        "logs-cloud_security_posture.findings_latest-default*",
                        "logs-cloud_security_posture.scores-default*",
                        "logs-cloud_security_posture.vulnerabilities_latest-default*"
                    )
                    .privileges("create_index", "read", "index", "delete", IndicesAliasesAction.NAME, UpdateSettingsAction.NAME)
                    .build() },
            null,
            new ConfigurableClusterPrivilege[] {
                new ManageApplicationPrivileges(Set.of("kibana-*")),
                new WriteProfileDataPrivileges(Set.of("kibana*")) },
            null,
            MetadataUtils.DEFAULT_RESERVED_METADATA,
            null,
            TcpTransport.isUntrustedRemoteClusterEnabled()
                ? new RoleDescriptor.RemoteIndicesPrivileges[] {
                    getRemoteIndicesReadPrivileges(".monitoring-*"),
                    getRemoteIndicesReadPrivileges("apm-*"),
                    getRemoteIndicesReadPrivileges("logs-apm.*"),
                    getRemoteIndicesReadPrivileges("metrics-apm.*"),
                    getRemoteIndicesReadPrivileges("traces-apm.*"),
                    getRemoteIndicesReadPrivileges("traces-apm-*") }
                : null
        );