Contains the principal (user) name.
In an enterprise bean, specifies the principal (user) name that has the run-as role specified.
security-role-mapping (sun-application.xml, sun-web.xml, sun-ejb-jar.xml), servlet (sun-web.xml)
none - contains data