anchor.diff:  
   [horizontal]
   `all`::
  -Any action on an index
  +Any action on an index or data stream.
   
   `create`::
   Privilege to index documents. Also grants access to the update mapping
  
positive.code: Read-only access to the search action from a <<cross-cluster-configuring,remote cluster>>.
  
  `view_index_metadata`::
  Read-only access to index metadata (aliases, aliases exists, get index, exists, field mappings,
  mappings, search shards, type exists, validate, warmers, settings, ilm). This
  privilege is primarily available for use by {kib} users.
  
  `write`::
  Privilege to perform all write operations to documents, which includes the
  
negative.code: No privilege to read or write index data or otherwise manage the index.
  
  `manage`::
  All `monitor` privileges plus index and data stream administration (aliases,
  analyze, cache clear, close, delete, exists, flush, mapping, open, force merge,
  refresh, settings, search shards, templates, validate).
  
  `manage_follow_index`::
  All actions that are required to manage the lifecycle of a follower index, which
  