Oracle WebLogic Server 11g Administration Handbook

Security Roles

A security role is a privilege (or an identity) the server dynamically grants to a user or group based on specific conditions such as username, group membership, or time of day. The security roles are privileges the server grants to a user or group based on some conditions. Roles restrict access just like groups, but the big difference between a group and a role is that roles are granted dynamically at run time. In addition, you can scope a role to a specific resource, whereas a group is simply a grouping of users that have similar characteristics. A user or group can have more than one role at the same time. Security policies use roles to determine who can access a WebLogic resource. A security role grants defined access privileges ...