diff --git a/src/authentication/routes/Authentication.ts b/src/authentication/routes/Authentication.ts
index 9dd7439eb4..976e8c1b52 100644
--- a/src/authentication/routes/Authentication.ts
+++ b/src/authentication/routes/Authentication.ts
@@ -9,7 +9,7 @@ export const AuthenticationRoute: RouteDef = {
   path: "/:realm/authentication/:tab?",
   component: lazy(() => import("../AuthenticationSection")),
   breadcrumb: (t) => t("authentication"),
-  access: "view-realm",
+  access: ["view-realm", "view-identity-providers", "view-clients"],
 };
 
 export const toAuthentication = (
diff --git a/src/authentication/routes/Flow.ts b/src/authentication/routes/Flow.ts
index 23b648c533..5a5e99c565 100644
--- a/src/authentication/routes/Flow.ts
+++ b/src/authentication/routes/Flow.ts
@@ -14,7 +14,7 @@ export const FlowRoute: RouteDef = {
   path: "/:realm/authentication/:id/:usedBy/:builtIn?",
   component: lazy(() => import("../FlowDetails")),
   breadcrumb: (t) => t("authentication:flowDetails"),
-  access: "manage-authorization",
+  access: "view-authorization",
 };
 
 export const toFlow = (params: FlowParams): LocationDescriptorObject => ({
diff --git a/src/realm/add/NewRealmForm.tsx b/src/realm/add/NewRealmForm.tsx
index 38e56c7733..c8f93191c5 100644
--- a/src/realm/add/NewRealmForm.tsx
+++ b/src/realm/add/NewRealmForm.tsx
@@ -24,7 +24,7 @@ import { toDashboard } from "../../dashboard/routes/Dashboard";
 export default function NewRealmForm() {
   const { t } = useTranslation("realm");
   const history = useHistory();
-  const { refresh } = useWhoAmI();
+  const { refresh, whoAmI } = useWhoAmI();
   const { refresh: refreshRealms } = useRealms();
   const adminClient = useAdminClient();
   const { addAlert, addError } = useAlerts();
@@ -59,7 +59,8 @@ export default function NewRealmForm() {
         <FormAccess
           isHorizontal
           onSubmit={handleSubmit(save)}
-          role="manage-realm"
+          role="view-realm"
+          isReadOnly={!whoAmI.canCreateRealm()}
         >
           <JsonFileUpload
             id="kc-realm-filename"
diff --git a/src/realm/routes/AddRealm.ts b/src/realm/routes/AddRealm.ts
index b1cbbae6a8..a541d85137 100644
--- a/src/realm/routes/AddRealm.ts
+++ b/src/realm/routes/AddRealm.ts
@@ -9,7 +9,7 @@ export const AddRealmRoute: RouteDef = {
   path: "/:realm/add-realm",
   component: lazy(() => import("../add/NewRealmForm")),
   breadcrumb: (t) => t("realm:createRealm"),
-  access: "manage-realm",
+  access: "view-realm",
 };
 
 export const toAddRealm = (
diff --git a/src/sessions/routes/Sessions.ts b/src/sessions/routes/Sessions.ts
index 5e225490ae..842be05aea 100644
--- a/src/sessions/routes/Sessions.ts
+++ b/src/sessions/routes/Sessions.ts
@@ -9,7 +9,7 @@ export const SessionsRoute: RouteDef = {
   path: "/:realm/sessions",
   component: lazy(() => import("../SessionsSection")),
   breadcrumb: (t) => t("sessions:title"),
-  access: "view-realm",
+  access: ["view-realm", "view-clients", "view-users"],
 };
 
 export const toSessions = (