Creating roles and groups

Roles are created to separate a section of users from the rest within the application. Application roles are defined inside the application, and the mapping of application roles to enterprise roles happens at deployment. Enterprise roles for users in JDeveloper exist only to simulate a real-world environment. Enterprise roles represent the user groups defined in corporate identity management. In the jazn-data.xml file, enterprise roles are created for testing to mimic the identity management system.

For example, application roles can be OPERATIONS_DUTY and MARKETING_DUTY, and enterprise roles can be VP_JOB and CHANNEL_MANAGER_JOB. The hierarchy can have an application role that can directly have users and some of the enterprise roles as well. Enterprise roles can further have enterprise roles and can directly have users.