Revision: n_2078971_login-module-reference_version_7.0.beta_edition_1.0_release_0-revision_7529333
Section: 9.6. DEPLOYMENTROLETOROLESMAPPINGPROVIDER

Issue description:
Description (and example) of DeploymentRoleToRolesMappingProvider describes that principal-name denotes role which is mapped to role-name. However in fact this mapping module takes role-name and replace it with all principal-name roles. It means that in example below when principal having the role Employee then it will have role Support and Sales. In case when it still should have also role Employee then role Employee has to be added in <principal-name> too.

Suggestions for improvement:
Update description and example of DeploymentRoleToRolesMappingProvider according to mentioned above information.