When you deploy Web applications and EJBs (or enterprise applications containing either of these) the Install Application Assistant prompts you to select a security model for the module that you are deploying (see Use roles and policies to secure resources).
Note: If you Enable automatic realm restart in the security realm, you do not need to restart WebLogic Server after activating changes to the default security model.
To set the security model that the Install Application Assistant presents as selected by default: