ccruser:
  cluster:
    - read_ccr
  indices:
    - names: [ 'allowed-index', 'clean-leader', 'forget-leader', 'logs-eu-*' ]
      privileges:
        - monitor
        - read
        - manage_leader_index