Oracle WebLogic Server 11g Administration Handbook

Users

A user can be a person such as an end user, a client application, or even another instance of the WebLogic Server. To access the server, users must provide credentials in the form of a password, a digital certificate, or an equivalent means of ascertaining their identity. The Authentication provider of the realm receives the user security credentials through a JAAS login module and associates the user's identity (principal) with a thread for that user to use to execute work. To authorize the user to perform the work, the server checks the security policy of the resource the user is accessing. You can associate an individual user directly with a security role, but the preferred way is to do the association through groups.

Creating a User ...