 the <code>ratings</code> workload.
Next, we configure a policy to grant the <code>reviews</code> workload that access.</p></li><li><p>Run the following command to create the <code>ratings-viewer</code> policy to allow the <code>reviews</code> workload,
which issues requests using the <code>cluster.local/ns/default/sa/bookinfo-reviews</code> service account,
to access the <code>ratings</code> workload through <code>GET</code> methods:</p><pre><code class=language-bash data-expandlinks=true data-repo=istio>$