@Kannan_K_R
Have you specified any JWT authentication policy on record.default.svc.cluster.local? You need the JWT policy in order to use the request.auth.claims property.
Also you should use the full service name in ServiceRole? Replace record with record.default.svc.cluster.local.
Note, the ClusterRbacConfig, ServiceRole and ServiceRoleBinding are deprecated in favor of the new AuthorizationPolicy in 1.4: https://istio.io/blog/2019/v1beta1-authorization-policy/