diff --git a/x-pack/docs/en/security/ccs-clients-integrations/cross-cluster.asciidoc b/x-pack/docs/en/security/ccs-clients-integrations/cross-cluster.asciidoc
index 605b509f1ec..303de75f760 100644
--- a/x-pack/docs/en/security/ccs-clients-integrations/cross-cluster.asciidoc
+++ b/x-pack/docs/en/security/ccs-clients-integrations/cross-cluster.asciidoc
@@ -39,6 +39,11 @@ For more information about the `xpack.security.enabled` setting, see
   ** Adding the CA certificate from the local cluster as a trusted CA in
     each remote cluster (see {ref}/security-settings.html#transport-tls-ssl-settings[Transport TLS settings]).
 
+
+* On the local cluster, ensure that users are assigned to (at least) one role
+  that exists on the remote clusters.  On the remote clusters, use that role
+  to define which indices the user may access.  (See <<authorization>>).
+
 * Configure the local cluster to connect to remote clusters as described
   in {ref}/modules-remote-clusters.html#configuring-remote-clusters[Configuring Remote Clusters].
   For example, the following configuration adds two remote clusters
@@ -65,9 +70,7 @@ PUT _cluster/settings
 -----------------------------------------------------------
 --
 
-* On the local cluster, ensure that users are assigned to (at least) one role
-  that exists on the remote clusters.  On the remote clusters, use that role
-  to define which indices the user may access.  (See <<authorization>>).
+
 
 ==== Example Configuration of Cross Cluster Search