@flipPipe wrote: Hi CharlesP,   I've already request PS to develop that kind of metrics to help in cleaning the configurations. If you want, ask your SE to push for this change request   CSC-I-603 Provide usage data on REALM, Role & VPN Access Control.   The best option to disable a role, is to remove it from role mapping. For the realm, just remove it from realms available or disable the signin page.   Good day. Do you know if there is a way to check on the progress of this change or if it is being considered? This would save me 10's of hours of work a year!   ... View more