anchor.diff:  realm users and roles into the native realm. It has been deprecated
   since 7.2.0. Users and roles should now be created in the native
   realm directly.
  +
  +*Impact* +
  +Discontinue use of the `elasticsearch-migrate` tool. Attempts to use the
  +`elasticsearch-migrate` tool will result in an error.
   ====
   
   [[separating-node-and-client-traffic]]
  
positive.code: Users who were previously assigned the `kibana_user` role should instead be assigned
  the `kibana_admin` role. This role grants the same set of privileges as `kibana_user`, but has been
  renamed to better reflect its intended use.
  ====
  
negative.code: `xpack.security.authz.store.roles.index.cache.ttl` settings have
  been removed. These settings have been redundant and deprecated
  since the 5.2 release of {es}.
  
  *Impact* +
  Discontinue use of the `xpack.security.authz.store.roles.index.cache.max_size`
  and `xpack.security.authz.store.roles.index.cache.ttl` settings. Specifying
  these settings in `elasticsearch.yml` will result in an error on startup.
  ====
  
  [[migrate-tool-removed]]
  