This illustration demonstrates how to use the <role-link> element to map the <security-role-ref> to a role defined in the <security-role> of the <assembly-descriptor>. The role defined in the <assembly-descriptor> is configured in your security definitions.