anchor.diff:  Next, set up a role called `cluster_two_logs` on both cluster `one` and
   cluster `two`.
   
  -On cluster `one`, this role allows the user to query any indices on remote clusters:
  +On cluster `one`, this role does not need any special privileges:
   
   [source,js]
   -----------------------------------------------------------
   POST /_xpack/security/role/cluster_two_logs
   {
  -  "indices": [
  -    {
  -      "names": [
  -        "*:*"
  -      ],
  -      "privileges": [
  -        "read"
  -      ]
  -    }
  -  ]
   }
   -----------------------------------------------------------
   
  
positive.code: is allowed to access.
  
  
   [WARNING]
  This feature was added as Beta in Elasticsearch `v5.3` with further
  improvements made in 5.4 and 5.5. It requires gateway eligible nodes to be on
  `v5.5` onwards.
  
negative.code:   }
  }
  -----------------------------------------------------------
  //TBD: Is there a missing description of the <1> callout above?
  
  include::{xkb-repo-dir}/security/cross-cluster-kibana.asciidoc[]
  