You can assign users, groups, and application roles statically (or by browsing the identity service). The values can be either of the following:

• A single user, group, or application role (for example, jstein, CentralLoanRegion, or ApproverRole).

• A delimited string of users, groups, or application roles (for example, jstein, wfaulk, cdickens).