Deployment Descriptor - Mapping Group of Users to J2EE Security Role