The sample payroll application has been configured to grant access based on whether the user has an Employee role or a Manager role. You can configure your J2EE Agent to use the authorization policies of the J2EE server or to use the policies of the Access Manager.