Username and Password can be used to keep your DBSync Cloud Replication more secured. The below steps should be followed to setup username and password.

<role rolename="manager"/>
   <role rolename="tomcat"/>
   <role rolename="admin"/>
   <role rolename="role1"/>
   <role rolename="dbsync"/>
   <user username="manager" password="manager" roles="manager"/>
   <user username="both" password="tomcat" roles="tomcat,role1"/>
   <user username="tomcat" password="tomcat" roles="tomcat"/>
   <user username="role1" password="tomcat" roles="role1"/>
   <user username="adminuser" password="adminpassword" roles="admin"/>
   <user username="repl" password="avankia1" roles="dbsync"/>

<security-constraint>
   <web-resource-collection>
      <web-resource-name>admin</web-resource-name>
      <url-pattern>/*</url-pattern>
                  <http-method>GET</http-method>
                <http-method>POST</http-method>
    </web-resource-collection>
    <auth-constraint>
      <role-name>tomcat</role-name>
                  <role-name>admin</role-name>
    </auth-constraint>
</security-constraint>
<login-config>
       <auth-method>BASIC</auth-method>
</login-config>

<security-role>
     <role-name>admin</role-name>
</security-role>