anchor.diff:  
   [horizontal]
   `all`::
  -Any action on an index
  +Any action on an index or data stream.
   
   `create`::
   Privilege to index documents. Also grants access to the update mapping
  
positive.code: 
  `manage_ilm`::
  All {Ilm} operations relating to managing the execution of policies of an index
  This includes operations like retrying policies, and removing a policy
  from an index.
  
  `manage_leader_index`::
  All actions that are required to manage the lifecycle of a leader index, which
  
negative.code: Read-only access to the search action from a <<cross-cluster-configuring,remote cluster>>.
  
  `view_index_metadata`::
  Read-only access to index and data stream metadata (aliases, aliases exists,
  get index, get data stream, exists, field mappings, mappings, search shards,
  type exists, validate, warmers, settings, ilm). This privilege is available
  for use primarily by {kib} users.
  
  `write`::
  Privilege to perform all write operations to documents, which includes the
  