Hello, I just filed a JIRA for a new WS method to check if a site/realm/authzgroup is devoid of roles: https://jira.sakaiproject.org/browse/SAK-22218 We had a local situation where sites were being created, but the corresponding relams had no roles. This method was used to check them. Enjoy! Seth