This figure illustrates role mapping. The <security-role-ref><role-link> maps to the <security_role> within the ejb-jar.xml file. In turn, the <security_role> maps to the <security_role_mapping> in the orion-ejb-jar.xml file. The <security_role_mapping> maps the <group> and <user> in the principals.xml file.