In addition to what Andrew said - @Stateless | @TransactionManagement(TransactionManagementType.CONTAINER) | @Remote(TestSessionBean.class) | @Local(TestSessionBean.class) | @RunAs("testRole") | @SecurityDomain("other") | public class TestSessionBeanImpl implements TestSessionBean { | P.S: Remember to use the @SecurityDomain from the correct package. The package names are different in 4.x and 5.x of AS. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4225018#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...