This new internal role is specifically for the agent profile user for the WebSphere Application Server 6.1 agent. This role will allow the agent profile user to read user attributes in the user repository.
Login to the Access Manager Console.
With the Access Control tab selected, click the name of the realm for which you would like to create the agent profile role.
Select the Subjects tab and then click the Role tab.
Click New and then enter a value for the agent profile role. For example: agentprofilerole
Click Create.
Under the Role tab, click the agent profile role.
On the new page, click the User tab.
Select the agent profile user (such as agentprofileuser) under the Available field.
Click Add and then Save.