Can't get cluster health by kerberized user

If I call curl -XGET https://<FQDN>:9200/_cluster/health -u '<user>:<pwd>' --insecure by internal user - it’s works correctly.
But if I call this request by same user with its keytab (curl -XGET --insecure --negotiate -u : https://<FQDN>:9200/_cluster/health), I have error no permissions for [cluster:monitor/health] and User [name=user, backend_roles=[], requestedTenant=null]

@Melok Can you try the below command and share the output?

curl --insecure --negotiate -u :  -XGET https://<FQDN>:9200/_plugins/_security/authinfo?pretty