Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
);
        assertThat(e.getCause(), sameInstance(unsupportedOperationException));
    }
    public void testGetRoleDescriptorsIntersectionForRemoteCluster() throws ExecutionException, InterruptedException {
        assumeTrue("untrusted remote cluster feature flag must be enabled", TcpTransport.isUntrustedRemoteClusterEnabled());
        final RemoteIndicesPermission.Builder remoteIndicesBuilder = RemoteIndicesPermission.builder();
        final String concreteClusterAlias = randomAlphaOfLength(10);
        final int numGroups = randomIntBetween(1, 3);
        final List<IndicesPrivileges> expectedIndicesPrivileges = new ArrayList<>();
        for (int i = 0; i < numGroups; i++) {
            final String[] indexNames = Objects.requireNonNull(generateRandomStringArray(3, 10, false, false));
            final boolean allowRestrictedIndices = randomBoolean();
            final boolean hasFls = randomBoolean();
            final FieldPermissionsDefinition.FieldGrantExcludeGroup group = hasFls
                ? randomFieldGrantExcludeGroup()
                : new FieldPermissionsDefinition.FieldGrantExcludeGroup(null, null);
            final BytesReference query = randomBoolean() ? randomDlsQuery() : null;
            final IndicesPrivileges.Builder builder = IndicesPrivileges.builder()
                .indices(Arrays.stream(indexNames).sorted().collect(Collectors.toList()))
                .privileges("read")
                .allowRestrictedIndices(allowRestrictedIndices)
                .query(query);
            if (hasFls) {
                builder.grantedFields(group.getGrantedFields());
                builder.deniedFields(group.getExcludedFields());
            }
            expectedIndicesPrivileges.add(builder.build());
            remoteIndicesBuilder.addGroup(
                Set.of(randomFrom(concreteClusterAlias, "*")),
                IndexPrivilege.READ,