anchor.diff:  | describe client                        | CLUSTER:READ                     |
   | describe config                        | CLUSTER:READ                     |
   | describe disk-store                    | CLUSTER:READ                     |
  +| describe jndi-binding                  | CLUSTER:READ                     |
   | describe lucene index                  | CLUSTER:READ:LUCENE              |
   | describe member                        | CLUSTER:READ                     |
   | describe offline-disk-store            | CLUSTER:READ                     |
  
positive.code: | create gateway-receiver                | CLUSTER:MANAGE:GATEWAY          |
  | create gateway-sender                  | CLUSTER:MANAGE:GATEWAY          |
  | create index                           | CLUSTER:MANAGE:QUERY            |
  | create lucene index                    | CLUSTER:MANAGE:LUCENE            |
  | create region                          | DATA:MANAGE, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  | define index                           | CLUSTER:MANAGE:QUERY             |
  
negative.code: | destroy disk-store                     | CLUSTER:MANAGE:DISK              |
  | destroy function                       | CLUSTER:MANAGE:DEPLOY            |
  | destroy index                          | CLUSTER:MANAGE:QUERY             |
  | destroy jndi-binding                   | CLUSTER:MANAGE                   |
  | destroy lucene index                   | CLUSTER:MANAGE:LUCENE            |
  | destroy region                         | DATA:MANAGE                      |
  | execute function                       | Defaults to DATA:WRITE. Override `Function.getRequiredPermissions` to change the permission.   |
  