Simple authorization using an access file

Some JVMs support a simple access file system for controlling JMX access. An access file is formatted the same way as password files (described in Enabling remote JMX with password authentication only), and associates roles with an access level. Valid access levels are readonly and readwrite:

• The readonly level only allows the JMX client to read an MBean's attributes and receive notifications.
• The readwrite level also allows setting attributes, invoking operations, and creating and removing MBeans.

To use an access file for JMX authorization, specify the name of the access file using a system property upon JVM startup:

-Dcom.sun.management.jmxremote.access.file=jmxremote.access

The contents of such an access file may look like this:

monitorRole   readonly
controlRole   readwrite

For more information, see "Monitoring and Management Using JMX Technology" at http://docs.oracle.com/javase/7/docs/technotes/guides/management/agent.html .