I can be misstaken, but as far as I understand - "training mode" is a RSBAC soft mode. When you use that mode, RSBAC does not deny yours action requests even if they are not allowed by RSBAC security policy, it [RSBAC] only shows message (and log them [but you can turn it off]) about the granted/rejected attempt of the requested action. Regards