anchor.diff:  | stop gateway-receiver                  | CLUSTER:MANAGE:GATEWAY           |
   | stop locator                           | CLUSTER:MANAGE                   |
   | stop server                            | CLUSTER:MANAGE                   |
  -| undeploy                               | CLUSTER:MANAGE:JAR               |
  +| undeploy                               | CLUSTER:MANAGE:DEPLOY            |
   
   The `gfsh connect` does not have a permission,
   as it is the operation that invokes authentication. 
  
positive.code: | create lucene index                    | CLUSTER:MANAGE:LUCENE            |
  | create region                          | DATA:MANAGE, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  | define index                           | CLUSTER:MANAGE:QUERY             |
  | deploy                                 | CLUSTER:MANAGE:JAR               |
  | describe client                        | CLUSTER:READ                     |
  | describe config                        | CLUSTER:READ                     |
  | describe disk-store                    | CLUSTER:READ                     |
  
negative.code: - `GATEWAY` to target operations that manage gateway senders and receivers
  - `QUERY` to target operations that manage both indexes and continuous
   queries
  - `DEPLOY` to target operations that deploy code to servers
  - `LUCENE` to target Lucene index operations
  
  This table classifies the permissions assigned for operations common to
  