Monitoring data can now be stored in `metrics-*` patterns when collected through elastic-agent. [Our documentation](https://www.elastic.co/guide/en/kibana/current/monitoring-data.html) recommends to use the `monitoring_user` role to view the data in Stack Monitoring application but that role does not have permissions to read from the metrics pattern.

`monitoring_user` should be allowed the same permissions on `metrics-*` as `.monitoring-*`
x-pack/plugin/security/src/test/java/org/elasticsearch/xpack/security/authz/RBACEngineTests.java
DataStream ds = DataStreamTestHelper.newInstance(
            dataStreamName,
            backingIndices.stream().map(IndexMetadata::getIndex).collect(Collectors.toList())
        );
        lookup.put(ds.getName(), ds);
        for (IndexMetadata im : backingIndices) {
            lookup.put(im.getIndex().getName(), new IndexAbstraction.ConcreteIndex(im, ds));
        }
        SearchRequest request = new SearchRequest("*");
        AuthorizedIndices authorizedIndices = RBACEngine.resolveAuthorizedIndicesFromRole(
            role,
            getRequestInfo(request, SearchAction.NAME),
            lookup,
            () -> ignore -> {}
        );
        assertThat(authorizedIndices.all().get(), hasItem(dataStreamName));
        assertThat(authorizedIndices.check(dataStreamName), is(true));
        assertThat(
            authorizedIndices.all().get(),
            hasItems(backingIndices.stream().map(im -> im.getIndex().getName()).collect(Collectors.toList()).toArray(Strings.EMPTY_ARRAY))
        );
        for (String index : backingIndices.stream().map(im -> im.getIndex().getName()).toList()) {
            assertThat(authorizedIndices.check(index), is(true));
        }
    }
    public void testExplicitMappingUpdatesAreNotGrantedWithIngestPrivileges() {
        final String dataStreamName = "my_data_stream";
        User user = new User(randomAlphaOfLengthBetween(4, 12));
        Role role = Role.builder(RESTRICTED_INDICES, "test1")
            .cluster(Collections.emptySet(), Collections.emptyList())