https://docs.jboss.org/author/display/AS7/Management+Configuration+-+Security
The web console itself is just a client to the http interface.
Despite that I know end users would ask in terms of the console so I
could add a short summary there to just use the script we ship to enable
the default realm.