Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
assertReadWriteDocsAndMaintenanceButNotDeleteIndexAllowed(role, ".alerts-" + randomIntBetween(0, 5));
        assertReadWriteDocsAndMaintenanceButNotDeleteIndexAllowed(role, ".internal.alerts-" + randomIntBetween(0, 5));
        assertReadWriteDocsAndMaintenanceButNotDeleteIndexAllowed(role, ".preview.alerts-" + randomIntBetween(0, 5));
        assertReadWriteDocsAndMaintenanceButNotDeleteIndexAllowed(role, ".internal.preview.alerts-" + randomIntBetween(0, 5));
        assertNoAccessAllowed(role, TestRestrictedIndices.SAMPLE_RESTRICTED_NAMES);
        assertNoAccessAllowed(role, "." + randomAlphaOfLengthBetween(6, 10));
        assertNoAccessAllowed(role, "ilm-history-" + randomIntBetween(0, 5));
        
        assertThat(
            role.application()
                .grants(ApplicationPrivilegeTests.createPrivilege("kibana-.kibana", "kibana-all", allowedApplicationActionPattern), "*"),
            is(true)
        );
        assertThat(role.runAs().check(randomAlphaOfLengthBetween(1, 20)), is(false));
    }
    public void testRemoteIndicesPrivilegesForSuperuserRole() {
        final RoleDescriptor superuserRoleDescriptor = new ReservedRolesStore().roleDescriptor("superuser");
        final Role superuserRole = Role.buildFromRoleDescriptor(
            superuserRoleDescriptor,
            new FieldPermissionsCache(Settings.EMPTY),
            RESTRICTED_INDICES
        );
        if (TcpTransport.isUntrustedRemoteClusterEnabled()) {
            assertThat(superuserRoleDescriptor.hasRemoteIndicesPrivileges(), is(true));
            assertThat(
                Arrays.stream(superuserRoleDescriptor.getRemoteIndicesPrivileges())
                    .map(RoleDescriptor.RemoteIndicesPrivileges::indicesPrivileges)
                    .toArray(RoleDescriptor.IndicesPrivileges[]::new),
                equalTo(superuserRoleDescriptor.getIndicesPrivileges())
            );