[Backport 3.1] add missing cluster:monitor permission (#5406)

Signed-off-by: Kaituo Li <[email protected]>
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

Author: opensearch-trigger-bot[bot]

config/roles.yml

@@ -520,6 +520,7 @@ forecast_full_access:
   cluster_permissions:
     - 'cluster:admin/plugin/forecast/*'
     - 'cluster:admin/settings/update'
+    - 'cluster_monitor'
   index_permissions:
     - index_patterns:
         - '*'

release-notes/opensearch-security.release-notes-3.1.0.0.md

@@ -19,6 +19,7 @@ Compatible with OpenSearch and OpenSearch Dashboards version 3.1.0
 * Include mapped roles when setting userInfo in ThreadContext ([#5369](https://github.com/opensearch-project/security/pull/5369))
 * Adds details for debugging Security not initialized error([#5370](https://github.com/opensearch-project/security/pull/5370))
 * [Resource Sharing] Store resource sharing info in indices that map 1-to-1 with resource index ([#5358](https://github.com/opensearch-project/security/pull/5358))
+* add missing cluster:monitor permission ([#5405](https://github.com/opensearch-project/security/pull/5405))
 
 ### Removed
 * Removed unused support for custom User object serialization ([#5339](https://github.com/opensearch-project/security/pull/5339))