This graphic shows the relationship amongst ejb-jar.xml, orion-ejb-jar.xml, and principals.xml. The ejb-jarj.xml file is responsible for security-role-ref sub-element role-link which refers to a security_role. The security_role refers to the orion-ejb-jar.xml security_role_mapping which refers to the principals.xml group. The group refers to one or more users.