anchor.diff:  | close durable-cq                       | CLUSTER:MANAGE:QUERY             |
   | compact disk-store                     | CLUSTER:MANAGE:DISK              |
   | configure pdx                          | CLUSTER:MANAGE                   |
  -| create async-event-queue               | CLUSTER:MANAGE:JAR, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  +| create async-event-queue               | CLUSTER:MANAGE:DEPLOY, plus CLUSTER:WRITE:DISK if the associated region is persistent |
   | create defined indexes                 | CLUSTER:MANAGE:QUERY            |
   | create disk-store                      | CLUSTER:MANAGE:DISK             |
   | create gateway-receiver                | CLUSTER:MANAGE:GATEWAY          |
  
positive.code: | stop gateway-receiver                  | CLUSTER:MANAGE:GATEWAY           |
  | stop locator                           | CLUSTER:MANAGE                   |
  | stop server                            | CLUSTER:MANAGE                   |
  | undeploy                               | CLUSTER:MANAGE:JAR               |
  
  The `gfsh connect` does not have a permission,
  as it is the operation that invokes authentication. 
  
negative.code: - `GATEWAY` to target operations that manage gateway senders and receivers
  - `QUERY` to target operations that manage both indexes and continuous
   queries
  - `DEPLOY` to target operations that deploy code to servers
  - `LUCENE` to target Lucene index operations
  
  This table classifies the permissions assigned for operations common to
  