ilm:
  cluster:
    - monitor
    - manage_ilm
  indices:
    - names: [ 'view-only-*' ]
      privileges:
        - view_index_metadata
    - names: [ 'ilm-*' ]
      privileges:
        - monitor
        - manage
        - read
        - write