A comma separated list of the codes of user roles you which to map to this security profile. There must be exactly one security profile which has the wildcard (*) in its list of userroles. Userroles that are not explicitly mapped are mapped to the security profile with the wildcard.