diff --git a/content/docs/concepts/security/index.md b/content/docs/concepts/security/index.md
index 093d06ee1a..f052d3a6a2 100644
--- a/content/docs/concepts/security/index.md
+++ b/content/docs/concepts/security/index.md
@@ -703,7 +703,7 @@ spec:
   - user: "service-account-a"
   - user: "istio-ingress-service-account"
     properties:
-    - request.auth.claims[email]: "a@foo.com"
+      request.auth.claims[email]: "a@foo.com"
   roleRef:
     kind: ServiceRole
     name: "products-viewer"
diff --git a/content/docs/tasks/security/role-based-access-control/index.md b/content/docs/tasks/security/role-based-access-control/index.md
index e959ea6ad7..483f1ff77f 100644
--- a/content/docs/tasks/security/role-based-access-control/index.md
+++ b/content/docs/tasks/security/role-based-access-control/index.md
@@ -254,7 +254,7 @@ account "cluster.local/ns/default/sa/bookinfo-productpage" (representing the "pr
       namespace: default
     spec:
       subjects:
-      - user: "spiffe://cluster.local/ns/default/sa/bookinfo-productpage"
+      - user: "cluster.local/ns/default/sa/bookinfo-productpage"
       roleRef:
         kind: ServiceRole
         name: "details-reviews-viewer"
@@ -307,7 +307,7 @@ account "cluster.local/ns/default/sa/bookinfo-reviews", which represents the "re
       namespace: default
     spec:
       subjects:
-      - user: "spiffe://cluster.local/ns/default/sa/bookinfo-reviews"
+      - user: "cluster.local/ns/default/sa/bookinfo-reviews"
       roleRef:
         kind: ServiceRole
         name: "ratings-viewer"