Use these commands in wsadmin to add users and groups to foreign bus roles.
$AdminTask addUserToForeignBusRole
{-bus busName
-foreignBus foreignBusName
-role roleName
-user userName}
$AdminTask addGroupToForeignBusRole
{-bus busName
-foreignBus foreignBusName
-role roleName
-group groupName}
$AdminConfig save