<pre><code class=language-yaml data-expandlinks=true data-repo=istio>apiVersion: &#34;rbac.istio.io/v1alpha1&#34;
kind: ServiceRole
metadata:
  name: book-reader
  namespace: default
spec:
  rules:
  - services: [&#34;bookstore.default.svc.cluster.local&#34;]
    paths: [&#34;/books/*”]
    methods: [&#34;GET”]
</code></pre><h4 id=using-authenticated-client-identities>Using authenticated client identities</h4><p>Suppose you want to grant this <code>book-reader</code> role to your <code>bookstore-fronten