Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
new FieldPermissionsDefinition(
                        Set.of(
                            randomBoolean()
                                ? randomFieldGrantExcludeGroup()
                                : new FieldPermissionsDefinition.FieldGrantExcludeGroup(null, null)
                        )
                    )
                ),
                randomBoolean() ? Set.of(randomDlsQuery()) : null,
                randomBoolean(),
                generateRandomStringArray(3, 10, false, false)
            );
        }
        final RemoteIndicesPermission permissions = remoteIndicesBuilder.build();
        List<RemoteIndicesPermission.RemoteIndicesGroup> remoteIndicesGroups = permissions.remoteIndicesGroups();
        final Role role1 = createSimpleRoleWithRemoteIndices(permissions);
        final RBACAuthorizationInfo authorizationInfo1 = mock(RBACAuthorizationInfo.class);
        when(authorizationInfo1.getRole()).thenReturn(role1);
        final PlainActionFuture<RoleDescriptorsIntersection> future1 = new PlainActionFuture<>();
        engine.getRoleDescriptorsIntersectionForRemoteCluster(concreteClusterAlias, authorizationInfo1, future1);
        final RoleDescriptorsIntersection actual1 = future1.get();
        
        final RemoteIndicesPermission shuffledPermissions = new RemoteIndicesPermission(
            shuffledList(
                remoteIndicesGroups.stream()
                    .map(
                        group -> new RemoteIndicesPermission.RemoteIndicesGroup(
                            group.remoteClusterAliases(),
                            shuffledList(group.indicesPermissionGroups())
                        )