Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
new FieldPermissions(new FieldPermissionsDefinition(Set.of(group))),
                query == null ? null : Set.of(query),
                allowRestrictedIndices,
                indexNames
            );
        }
        final String mismatchedConcreteClusterAlias = randomValueOtherThan(concreteClusterAlias, () -> randomAlphaOfLength(10));
        
        final int numMismatchedGroups = randomIntBetween(0, 3);
        for (int i = 0; i < numMismatchedGroups; i++) {
            remoteIndicesBuilder.addGroup(
                Set.of(mismatchedConcreteClusterAlias),
                IndexPrivilege.READ,
                new FieldPermissions(
                    new FieldPermissionsDefinition(Set.of(new FieldPermissionsDefinition.FieldGrantExcludeGroup(null, null)))
                ),
                null,
                randomBoolean(),
                generateRandomStringArray(3, 10, false, false)
            );
        }
        final Role role = createSimpleRoleWithRemoteIndices(remoteIndicesBuilder.build());
        final RBACAuthorizationInfo authorizationInfo = mock(RBACAuthorizationInfo.class);
        when(authorizationInfo.getRole()).thenReturn(role);
        final PlainActionFuture<RoleDescriptorsIntersection> future = new PlainActionFuture<>();
        engine.getRoleDescriptorsIntersectionForRemoteCluster(concreteClusterAlias, authorizationInfo, future);
        final RoleDescriptorsIntersection actual = future.get();
        assertThat(
            actual,
            equalTo(