anchor.diff:  is allowed to access.
   
   
  - [WARNING]
  +[WARNING]
   This feature was added as Beta in Elasticsearch `v5.3` with further
   improvements made in 5.4 and 5.5. It requires gateway eligible nodes to be on
   `v5.5` onwards.
  
positive.code: Next, set up a role called `cluster_two_logs` on both cluster `one` and
  cluster `two`.
  
  On cluster `one`, this role allows the user to query any indices on remote clusters:
  
  [source,js]
  -----------------------------------------------------------
  POST /_xpack/security/role/cluster_two_logs
  {
    "indices": [
      {
        "names": [
          "*:*"
        ],
        "privileges": [
          "read"
        ]
      }
    ]
  }
  -----------------------------------------------------------
  
  
negative.code:   }
  }
  -----------------------------------------------------------
  //TBD: Is there a missing description of the <1> callout above?
  
  include::{xkb-repo-dir}/security/cross-cluster-kibana.asciidoc[]
  