auth-constraint in WEB.xml and security-role-assignment in WEBLOGIC.xml

SonPat99

Dear GURUS,

I am trying to understand a few of the descriptors used for Security authentication using LDAP in web.xml and weblogic.xml:

Web.xml:

<security-constraint>

       <auth-constraint>

       <role-name>webuser</role-name>

WEBLOGIC.xml:

<security-role-assignment>

  <role-name>webuser</role-name>

  <principal-name>myGroup</principal-name>

  </security-role-assignment>

AND

<security-role-assignment>

  <role-name>webuser</role-name>

  <externally-defined/>

  </security-role-assignment>

I need to understand how and where to define the roles and associated groups/users when using "externally-defined" descriptor.

Please note that I am trying to use groups defined in my LDAP, but am unable to use all the groups defined there.

OBIEE 12.2.1.4 and Server is Windows Server 2012 R2.

Any guidance or suggestions for this is highly appreciated.

Please direct me towards some documents with example if possible.