There are two factors that control access to a resource in Ensemble: authentication and policies.
Ensemble manages authentication with each proxied application based on the settings defined for the associated resource. Each resource is protected by a policy set, which describes the conditions under which a user may be granted access to the resource, and the roles associated with those conditions. For details on using roles, see Using Ensemble Roles in Pagelets and Proxied Applications.