e>qualified-reviewer</code>) is used in the authorization policy.</p><pre><code class=language-yaml data-expandlinks=true data-repo=istio>apiVersion: &#34;rbac.istio.io/v1alpha1&#34;
kind: ServiceRoleBinding
metadata:
  name: book-reader
  namespace: default
spec:
  subjects:
  - user: &#34;cluster.local/ns/default/sa/bookstore-frontend&#34;
    properties:
      request.auth.claims[group]: &#34;qualified-reviewer&#34;
  roleRef:
    kind: ServiceRole
    name: &#34;book-reader&#34;
</code></pre><h4 id=clie