anchor.diff:        ],
         "privileges": [
           "read",
  -        "read_cross_cluster",
  -        "view_index_metadata"
  +        "read_cross_cluster"
         ]
       }
     ]
  
positive.code: Next, set up a role called `cluster_two_logs` on both cluster `one` and
  cluster `two`.
  
  On cluster `one`, this role allows the user to query indices called `logs-` on
  cluster `two`:
  
  [source,js]
  -----------------------------------------------------------
  
negative.code: roles are passed to the remote clusters. A remote cluster checks the user's
  roles against its local role definitions to determine which indices the user
  is allowed to access.
  
  To use cross cluster search with secured clusters:
  
  