One role might be granted to multiple groups or users (principals); one group or principal may have multiple roles mapped to it.

可以将一个角色授予多个组或用户(主体)；一个组或主体可以具有映射到它的多个角色。

youdao

Note that if the EAR is deployed on multiple machines where users are not necessarily the same, you can still change the role to a user or group mapping at deployment time.

注意，如果该EAR被部署到多个机器上，其中用户并不一定是相同的，您仍然可以在部署时改变角色到用户或组的映射。

youdao

A role can represent multiple users, but it also represents the permissions that a set of users can perform.

一个角色可以代表多个用户，但它也代表一个用户集可以执行的权限。

youdao