Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/core/src/test/java/org/elasticsearch/xpack/core/security/authz/store/ReservedRolesStoreTests.java
);
        assertThat(role.cluster().check(DelegatePkiAuthenticationAction.NAME, request, authentication), is(false));
        assertThat(role.runAs().check(randomAlphaOfLengthBetween(1, 12)), is(false));
        assertNoAccessAllowed(role, "foo");
        assertNoAccessAllowed(role, "foo-apm");
        assertNoAccessAllowed(role, "foo-logs-apm.bar");
        assertNoAccessAllowed(role, "foo-logs-apm-bar");
        assertNoAccessAllowed(role, "foo-traces-apm.bar");
        assertNoAccessAllowed(role, "foo-traces-apm-bar");
        assertNoAccessAllowed(role, "foo-metrics-apm.bar");
        assertNoAccessAllowed(role, "foo-metrics-apm-bar");
        assertOnlyReadAllowed(role, "logs-apm." + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "logs-apm-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "traces-apm." + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "traces-apm-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "metrics-apm." + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "metrics-apm-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, "apm-" + randomIntBetween(0, 5));
        assertOnlyReadAllowed(role, AnomalyDetectorsIndexFields.RESULTS_INDEX_PREFIX + AnomalyDetectorsIndexFields.RESULTS_INDEX_DEFAULT);
        assertOnlyReadAllowed(role, "observability-annotations");
        assertThat(
            role.application().grants(ApplicationPrivilegeTests.createPrivilege(kibanaApplicationWithRandomIndex, "app-foo", "foo"), "*"),
            is(false)
        );
        assertThat(
            role.application()
                .grants(
                    ApplicationPrivilegeTests.createPrivilege(
                        kibanaApplicationWithRandomIndex,
                        "app-reserved_ml_apm_user",