The default security settings for WebLogic Server MBeans are as follows:

• All roles have read access to all attributes that are not encrypted.
• All roles can invoke lookup operations, such as lookupCluster(String name) in DomainMBean.
• All roles can invoke the userExists method on security provider MBeans.
• Only the Admin role has read access to encrypted attributes.
• Only the Admin role has write access to writable attributes and can invoke operations other than lookup operations.

Security providers can override these default settings. If you use third-party security providers, review the documentation from the third-party vendor.

For more information, see Security Roles for MBeans

.