Check this out from jboss-web.xml <!-- | The security-role element contains the definition of a security role. | The definition consists of an the security role name and principal name element(s). | | Used in: jboss-web | | Example: | <security-role> | <role-name>Manager</role-name> | <principal-name>j2ee</principal-name> | <principal-name>javajoe</principal-name> | </security-role> | --> View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4131724#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...