Could you attach your esb configuration highlighting that section? When you say it does not work, have you setup some debug to see what is happening? Could you attach the server log for identifying the issue furtehr. You can have a look at the security_jbpm quickstart, where it is used without the 'invmScope=Global'.