Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
final List<RemoteIndicesPermission.RemoteIndicesGroup> remoteIndicesGroups = superuserRole.remoteIndices()
                .remoteIndicesGroups();
            assertThat(remoteIndicesGroups.size(), equalTo(1));
            assertThat(remoteIndicesGroups.get(0).remoteClusterAliasMatcher().isTotal(), is(true));
        } else {
            assertThat(superuserRoleDescriptor.hasRemoteIndicesPrivileges(), is(false));
            assertThat(superuserRoleDescriptor.getRemoteIndicesPrivileges(), emptyArray());
            assertThat(superuserRole.remoteIndices(), is(RemoteIndicesPermission.NONE));
        }
    }
    public void testRemoteIndicesPrivileges() {
        final List<String> rolesWithRemoteIndicesPrivileges = new ArrayList<>();
        for (RoleDescriptor roleDescriptor : new ReservedRolesStore().roleDescriptors()) {
            if (roleDescriptor.getName().equals("superuser")) {
                continue;  
            }
            final Role role = Role.buildFromRoleDescriptor(roleDescriptor, new FieldPermissionsCache(Settings.EMPTY), RESTRICTED_INDICES);
            if (TcpTransport.isUntrustedRemoteClusterEnabled()) {
                
                
                final var readCrossClusterIndicesPrivileges = Arrays.stream(roleDescriptor.getIndicesPrivileges())
                    .filter(ip -> Arrays.asList(ip.getPrivileges()).contains("read_cross_cluster"))
                    .toArray(RoleDescriptor.IndicesPrivileges[]::new);
                if (readCrossClusterIndicesPrivileges.length == 0) {
                    assertThat(roleDescriptor.hasRemoteIndicesPrivileges(), is(false));
                } else {
                    assertThat(roleDescriptor.hasRemoteIndicesPrivileges(), is(true));
                    assertThat(
                        Arrays.stream(roleDescriptor.getRemoteIndicesPrivileges())
                            .map(RoleDescriptor.RemoteIndicesPrivileges::indicesPrivileges)