users and roles are defined in simple property files that you can find in server configuration folder, for AS7 it is JBOSS_HOME/standalone/configuration:
users.properties
roles.properties
HTH
Reply to this message by going to Community
Start a new discussion in jBPM at Community