#

# Access control file for Remote JMX API access to MBeanServer resources.

# This file defines the allowed access for different roles.

# The file format for the access file is syntactically the same as the

# Properties file format. The syntax is described in the Javadoc for

# java.util.Properties.load.

# A typical access file has multiple lines, where each line is blank,

# a comment (like this one), or an access control entry.

# An access control entry consists of a role name, and an associated access

# level. The role name is any string that does not itself contain spaces or

# tabs. It corresponds to an entry in the password file. The access level

# is one of the following:

#

# "readonly" grants access to read attributes of MBeans.

# For monitoring, this means that a remote client in this

# role can read measurements but cannot perform any action

# that changes the environment of the running program.

#

# "readwrite" grants access to read and write attributes of MBeans, to

# invoke operations on them, and to create or remove them.

# This access should be only granted to trusted clients,

# since they can potentially interfere with the smooth

# operation of a running program.

# A given role should have at most one entry in this file. If a role has no

# entry, it has no access.

# If multiple entries are found for the same role name, then the last access

# entry is used.

# Access rights granted to the authenticated identity by the RMI connector

# in this example.

#

admin readwrite

user readonly