如何确定使用Spring Security访问URL所需的角色？

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/admin/**").hasRole("ADMIN")
                .antMatchers("/user/**").hasAnyRole("ADMIN", "USER")
                .antMatchers("/**").permitAll()
                .and()
            .formLogin();
    }
}

@PreAuthorize("hasRole('ADMIN')")
public String adminOnlyMethod() {
    return "This method can only be accessed by users with the ADMIN role.";
}