The process of associating groups and principals recognized by the container to security roles specified in the deployment descriptor.