OpenSearch/x-pack/plugin/ccr/qa/multi-cluster-with-security/roles.yml

ccruser:
  cluster:
    - manage_ccr
  indices:
    - names: [ 'allowed-index' ]
      privileges:
        - monitor
        - read
        - write