what do you think about a findAdminRoles() method into org.jboss.portal.identity.RoleModule interface? Set findAdminRoles() throws IdentityException; it could avoid to write a properties file for an external portlet, so you don't duplicate roles definition in your projects. JBoss Feeds for example needs of a similar method to do authorization controls on a logged user. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4205947#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...