The "admin" principal is a com.sun.enterprise.deployment.PrincipalImpl .
The "asadmin" principal is a com.sun.enterprise.deployment.Group .
So that does look right... I'm going to look at the actual PolicyConfiguration used.
[Message sent by forum member 'brian_of_fortent' (brian_of_fortent)]
http://forums.java.net/jive/thread.jspa?messageID=275791