...
<tomcat-users>
  # ...
  <role rolename="tomcat"/>
  <role rolename="admin-gui"/>
  <role rolename="manager-gui"/>
  <user username="tomcat" password="XXXXXX" roles="tomcat,admin-gui,manager-gui"/>
</tomcat-users>
...