Hi everyone, Is there a possibility to *declaratively* verify in the JBoss/JavaAdapter that the user(service account) has both REALM and Client roles? In the documentation I found the following: use-resource-role-mappingsIf set to true, the adapter will look inside the token for application level role mappings for the user. If false, it will look at the realm level for user role mappings. This is *OPTIONAL*. The default value is *false*. It sounds like is one or the other, which is kind of limited.... Thanks and regards, Adrian