integ_test_role:
  indices:
    - names: [ 'my-index', 'my-source-index' ]
      privileges:
        - manage
        - read
        - write

enrich_no_privs:
  cluster:
    - manage_ingest_pipelines
    - monitor
  indices:
    - names: [ '.enrich-my_policy*', 'my-index', 'my-source-index' ]
      privileges:
        - manage
        - read
        - write