process realm permissions from config