Developing Web Applications with Servlets and JSPs - Java EE 6 Development with NetBeans 7 - page 86

NetBeans automatically detects the security role names in web.xml and fills Security
Role Name text field. Then we need to enter one or more groups to be assigned to
this role. Groups can be added by clicking the Add Group... button and entering the
group name, which must match the name of a security group defined in the security
realm our application is using for authentication.
The last thing we need to do to finish configuring application security, is to create
our users and groups in the security realm used by our application. To do this with
the pre-configured file realm in GlassFish, we need to open the GlassFish admin
console by going to the Services window, expanding the Servers node, then right-
clicking on the GlassFish Server 3 , and selecting View Admin Console .