When migrating a Web application that has role mappings, if the J2EE role is different from the mapped EAServer role, a third role with the name of the J2EE role name is created. The generated configuration is similar to this:
<setProperties securityDomain="default"> <addRole role="eaf.EAF Admin" toRole="Admin Role"/> <addRole role="eaf.EAF Admin" toRole="EAF Admin"/> </setProperties>