Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
return MapBuilder.newMapBuilder();
    }
    private BytesArray randomDlsQuery() {
        return new BytesArray(
            "{ \"term\": { \"" + randomAlphaOfLengthBetween(3, 24) + "\" : \"" + randomAlphaOfLengthBetween(3, 24) + "\" }"
        );
    }
    private FieldPermissionsDefinition.FieldGrantExcludeGroup randomFieldGrantExcludeGroup() {
        return new FieldPermissionsDefinition.FieldGrantExcludeGroup(generateRandomStringArray(3, 10, false, false), new String[] {});
    }
    private Role createSimpleRoleWithRemoteIndices(final RemoteIndicesPermission remoteIndicesPermission) {
        final String[] roleNames = generateRandomStringArray(3, 10, false, false);
        Role.Builder roleBuilder = Role.builder(new RestrictedIndices(Automatons.EMPTY), roleNames);
        remoteIndicesPermission.remoteIndicesGroups().forEach(group -> {
            group.indicesPermissionGroups()
                .forEach(
                    p -> roleBuilder.addRemoteGroup(
                        group.remoteClusterAliases(),
                        p.getFieldPermissions(),
                        p.getQuery(),
                        p.privilege(),
                        p.allowRestrictedIndices(),
                        p.indices()
                    )
                );
        });
        return roleBuilder.build();
    }
}