Where do I map Roles to Users and Groups?
You can use logical roles or actual users and groups in the EJB deployment descriptor. However, if you use logical roles, you must map them to the actual users and groups defined either in the JAZN or XML User Managers in the orion-ejb-jar.xml. For example maps the logical role POMGR to the managers group in the orion-ejb-jar.xml file.