Use these commands in wsadmin to add users and groups to foreign bus roles.
To grant a user or group access to a foreign bus, add them to the Sender or IdentityAdopter role as appropriate.
$AdminTask addUserToForeignBusRole
{-bus busName
-foreignBus foreignBusName
-role roleName
-user userName}
$AdminTask addGroupToForeignBusRole
{-bus busName
-foreignBus foreignBusName
-role roleName
-group groupName}
$AdminConfig save