To create the security roles in the EAR deployment descriptor, use the role Mapping button.

Enter the path to the EAR file or use the Browse button to find it.

Give it a try, even something complex, hold the phone to your ear and speak, or press the mic button-it's that simple.