anchor.diff:  | stop gateway-receiver                  | CLUSTER:MANAGE:GATEWAY           |
   | stop locator                           | CLUSTER:MANAGE                   |
   | stop server                            | CLUSTER:MANAGE                   |
  -| undeploy                               | CLUSTER:MANAGE:JAR               |
  +| undeploy                               | CLUSTER:MANAGE:DEPLOY            |
   
   The `gfsh connect` does not have a permission,
   as it is the operation that invokes authentication. 
  
positive.code: | close durable-cq                       | CLUSTER:MANAGE:QUERY             |
  | compact disk-store                     | CLUSTER:MANAGE:DISK              |
  | configure pdx                          | CLUSTER:MANAGE                   |
  | create async-event-queue               | CLUSTER:MANAGE:JAR, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  | create defined indexes                 | CLUSTER:MANAGE:QUERY            |
  | create disk-store                      | CLUSTER:MANAGE:DISK             |
  | create gateway-receiver                | CLUSTER:MANAGE:GATEWAY          |
  
negative.code: | describe offline-disk-store            | CLUSTER:READ                     |
  | describe region                        | CLUSTER:READ                     |
  | destroy disk-store                     | CLUSTER:MANAGE:DISK              |
  | destroy function                       | CLUSTER:MANAGE:DEPLOY            |
  | destroy index                          | CLUSTER:MANAGE:QUERY             |
  | destroy lucene index                   | CLUSTER:MANAGE:LUCENE            |
  | destroy region                         | DATA:MANAGE                      |
  