Microsoft has recently released an excellent whitepaper entitled Role-Based Access Control for Multi-tier Applications Using Authorization Manager which explains how to use "Azman". For any developer out there using Commerce Server 2006 Beta 1 or Commerce Server 2002 FP1, you really need to read this, especially if you're not familiar with how MS uses "Azman" to handle the role-based security for CS Web Services. This issue has been the single most overlooked problem in setting up the Commerce Server 2002 FP1 or the new Commerce Server 2007 web services.
Take a few minutes to download and read this whitepaper. It's a real time saver for those of us work on Commerce Server!