hey, im trying to allow read-only users to view metrics of pods I tried adding those to my rule

- apiGroups:
  - <http://catalog.cattle.io|catalog.cattle.io>
  resources:
  - apps
  verbs:
  - list
- apiGroups:
  - '*'
  resources:
  - services/proxy
  verbs:
  - create

but I can't see the metrics tab what is the correct configuration? (it's works if I am using * on apigroups and resources)