Java UME Security Guide?

Hello,

I'm looking to understand NW java security. For example I need to understand enough to give a development team access to the WebDynpro adminstrator enough to look at and test their WebDynpro developments but not have access to the WebDynpro console, ume, other NW administration. The portal will not be used at this point. I want to be able to restrict permissions in java only. Is there a security guide out there that explains this.

Your help is appreciated.

Thanks,

Doug

The roles I'm seeing out of box in our sandbox are...

Administrator

SAP_JAVA_NWADMIN_CENTRAL

SAP_JAVA_NWADMIN_CENTRAL_READONLY

SAP_JAVA_NWADMIN_LOCAL

SAP_JAVA_NWADMIN_LOCAL_READONLY

SAP_JAVA_NWMOBILE_ADMIN_READONLY

SAP_JAVA_NWMOBILE_ADMIN_SUPER

SAP_JAVA_NWMOBILE_HG_ADMIN

SAP_JAVA_SUPPORT