Default Security Policies for MBeans

Overview | MBeanServer Services | Domain Configuration MBeans | Runtime MBeans | System Module MBeans

Overview

To connect to a WebLogic Server MBean server, a JMX client must supply credentials for a user who has been defined in the WebLogic Server domain's security realm. To further secure the MBeans that have been registered in an MBean server, WebLogic Server uses security roles and policies.

By default, a WebLogic Server security realm contains four global security roles: Admin, Deployer, Operator, and Monitor, and the default security policies for WebLogic Server MBeans grant the following permissions:

All users have read access to all attributes that are not encrypted.
All users can invoke lookup operations, such as lookupCluster(String name) in DomainMBean.
All users can invoke the userExists method on security provider MBeans.
Only the Admin role has read access to encrypted attributes.
Only the Admin role has write access to writable attributes and can invoke operations other than lookup operations.

MBeanServer Services

The following table lists the MBeanServer service MBeans that override the default security settings. MBeanServer service MBeans are your entry point into navigating the MBean hierarchies. Some of these MBeans contain attributes and operations for managing changes to WebLogic Server configuration MBeans.

ActivationTaskMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ConfigurationManagerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DomainRuntimeServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: All roles
EditServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
EditSessionServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
GarDescriptorMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
RecordingManagerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ResourceGroupMigrationTaskMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
RuntimeServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: All roles

Domain Configuration MBeans

The following table lists the domain configuration MBeans that override the default security settings. Domain configuration MBeans configure clusters, server instances, containers within the server (such as the EJB and servlet containers), and other services that servers provide to applications.

AppDeploymentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: DeploymentPlanExternalDescriptors Read access is granted only to the following roles: Admin Deployer DeploymentPlan Read access is granted only to the following roles: Admin Deployer
ApplicationMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceCacheConfigMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceClusterSystemResourceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceManagementClusterMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ConnectorComponentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DataSourceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DomainMBean	The following attributes override all other security settings for this MBean: FileStores Read access is granted only to the following roles: Admin Deployer JMSBridgeDestinations Read access is granted only to the following roles: Admin Deployer PathServices Read access is granted only to the following roles: Admin Deployer BridgeDestinations Read access is granted only to the following roles: Admin Deployer The following operations override all other security settings for this MBean: lookupJDBCStore Only the following roles can invoke this operation: Admin Deployer createJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer listTags Only the following roles can invoke this operation: Admin Deployer Operator Monitor lookupJMSServer Only the following roles can invoke this operation: Admin Deployer createSAFAgent Only the following roles can invoke this operation: Admin Deployer createJMSInteropModule Only the following roles can invoke this operation: Admin Deployer destroyJMSInteropModule Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer destroyJMSServer Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer destroySAFAgent Only the following roles can invoke this operation: Admin Deployer lookupJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer lookupJMSInteropModule Only the following roles can invoke this operation: Admin Deployer lookupBridgeDestination Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer lookupFileStore Only the following roles can invoke this operation: Admin Deployer lookupTarget Only the following roles can invoke this operation: Admin Deployer Operator destroyJMSSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer lookupPathService Only the following roles can invoke this operation: Admin Deployer createMessagingBridge Only the following roles can invoke this operation: Admin Deployer destroyFileStore Only the following roles can invoke this operation: Admin Deployer destroyJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer createPathService Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJMSSystemResource Only the following roles can invoke this operation: Admin Deployer destroyPathService Only the following roles can invoke this operation: Admin Deployer createJDBCStore Only the following roles can invoke this operation: Admin Deployer destroyBridgeDestination Only the following roles can invoke this operation: Admin Deployer lookupSAFAgent Only the following roles can invoke this operation: Admin Deployer createJMSServer Only the following roles can invoke this operation: Admin Deployer lookupSystemResource Only the following roles can invoke this operation: Admin Deployer arePartitionsPresent Only the following roles can invoke this operation: Admin Deployer Operator Monitor destroyJDBCStore Only the following roles can invoke this operation: Admin Deployer createBridgeDestination Only the following roles can invoke this operation: Admin Deployer createFileStore Only the following roles can invoke this operation: Admin Deployer lookupMessagingBridge Only the following roles can invoke this operation: Admin Deployer destroyMessagingBridge Only the following roles can invoke this operation: Admin Deployer destroyJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer
DynamicDeploymentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
EJBComponentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
FileStoreMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCStoreMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCSystemResourceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSBridgeDestinationMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSConnectionConsumerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSConnectionFactoryMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDestinationKeyMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDestinationMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedDestinationMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedDestinationMemberMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedQueueMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedQueueMemberMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedTopicMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSDistributedTopicMemberMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSFileStoreMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSInteropModuleMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSJDBCStoreMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSQueueMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSServerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSSessionPoolMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSStoreMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSSystemResourceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Deployer
JMSTemplateMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSTopicMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JoltConnectionPoolMBean	The following attributes override all other security settings for this MBean: ApplicationPassword Read access is granted only to the following roles: Admin Deployer UserPassword Read access is granted only to the following roles: Admin Deployer UserPasswordEncrypted Read access is granted only to the following roles: Admin Deployer ApplicationPasswordEncrypted Read access is granted only to the following roles: Admin Deployer
LibraryMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: DeploymentPlanExternalDescriptors Read access is granted only to the following roles: Admin Deployer DeploymentPlan Read access is granted only to the following roles: Admin Deployer
MailSessionMBean	The following attributes override all other security settings for this MBean: SessionPasswordEncrypted Read access is granted only to the following roles: Admin Deployer SessionPassword Read access is granted only to the following roles: Admin Deployer SessionUsername Read access is granted only to the following roles: Admin Deployer
MailSessionOverrideMBean	The following attributes override all other security settings for this MBean: SessionPassword Read access is granted only to the following roles: Admin Deployer SessionUsername Read access is granted only to the following roles: Admin Deployer
MessagingBridgeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
PartitionMBean	The following attributes override all other security settings for this MBean: ResourceDeploymentPlan Read access is granted only to the following roles: Admin Deployer ResourceDeploymentPlanExternalDescriptors Read access is granted only to the following roles: Admin Deployer The following operations override all other security settings for this MBean: findEffectiveServerNames Only the following roles can invoke this operation: Admin Deployer Operator Monitor
PathServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ResourceGroupMBean	The following operations override all other security settings for this MBean: lookupJMSSystemResource Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJDBCStore Only the following roles can invoke this operation: Admin Deployer destroyJMSServer Only the following roles can invoke this operation: Admin Deployer lookupFileStore Only the following roles can invoke this operation: Admin Deployer destroyPathService Only the following roles can invoke this operation: Admin Deployer createJDBCStore Only the following roles can invoke this operation: Admin Deployer lookupSAFAgent Only the following roles can invoke this operation: Admin Deployer createJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer destroyJMSSystemResource Only the following roles can invoke this operation: Admin Deployer createJMSServer Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJMSServer Only the following roles can invoke this operation: Admin Deployer lookupJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer findEffectiveTargets Only the following roles can invoke this operation: Admin Deployer Operator Monitor destroySAFAgent Only the following roles can invoke this operation: Admin Deployer lookupJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer createSAFAgent Only the following roles can invoke this operation: Admin Deployer lookupPathService Only the following roles can invoke this operation: Admin Deployer destroyJDBCStore Only the following roles can invoke this operation: Admin Deployer createMessagingBridge Only the following roles can invoke this operation: Admin Deployer destroyFileStore Only the following roles can invoke this operation: Admin Deployer destroyJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer createFileStore Only the following roles can invoke this operation: Admin Deployer lookupMessagingBridge Only the following roles can invoke this operation: Admin Deployer areDefinedInTemplate Only the following roles can invoke this operation: Admin Deployer Operator Monitor createPathService Only the following roles can invoke this operation: Admin Deployer destroyMessagingBridge Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer destroyJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer
ResourceGroupTemplateMBean	The following operations override all other security settings for this MBean: lookupJMSSystemResource Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJDBCStore Only the following roles can invoke this operation: Admin Deployer destroyJMSServer Only the following roles can invoke this operation: Admin Deployer lookupFileStore Only the following roles can invoke this operation: Admin Deployer destroyPathService Only the following roles can invoke this operation: Admin Deployer createJDBCStore Only the following roles can invoke this operation: Admin Deployer lookupSAFAgent Only the following roles can invoke this operation: Admin Deployer createJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer destroyJMSSystemResource Only the following roles can invoke this operation: Admin Deployer createJMSServer Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer lookupJMSServer Only the following roles can invoke this operation: Admin Deployer lookupJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer destroySAFAgent Only the following roles can invoke this operation: Admin Deployer lookupJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer createSAFAgent Only the following roles can invoke this operation: Admin Deployer lookupPathService Only the following roles can invoke this operation: Admin Deployer destroyJDBCStore Only the following roles can invoke this operation: Admin Deployer createMessagingBridge Only the following roles can invoke this operation: Admin Deployer destroyFileStore Only the following roles can invoke this operation: Admin Deployer destroyJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer createFileStore Only the following roles can invoke this operation: Admin Deployer lookupMessagingBridge Only the following roles can invoke this operation: Admin Deployer createPathService Only the following roles can invoke this operation: Admin Deployer destroyMessagingBridge Only the following roles can invoke this operation: Admin Deployer createJDBCSystemResource Only the following roles can invoke this operation: Admin Deployer destroyJMSBridgeDestination Only the following roles can invoke this operation: Admin Deployer createJMSSystemResource Only the following roles can invoke this operation: Admin Deployer
SAFAgentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ShutdownClassMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
StartupClassMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SubDeploymentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
TargetInfoMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WebAppComponentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WebServerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WebServiceComponentMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFSystemResourceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCExportMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCImportMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCLocalTuxDomMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCPasswordMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCRemoteTuxDomMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCResourcesMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCServerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCtBridgeGlobalMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WTCtBridgeRedirectMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer

Runtime MBeans

The following table lists the runtime MBeans that override the default security settings. Runtime MBeans provide information about the runtime state of WebLogic Server resources.

AccessRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Monitor Operator
AppDeploymentRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Operator
ApplicationRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator Exceptions: The following operations override all other security settings for this MBean: lookupComponents Only the following roles can invoke this operation: Admin Deployer
AppRuntimeStateRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Operator Monitor Exceptions: The following operations override all other security settings for this MBean: getModuleIds Only the following roles can invoke this operation: Admin Deployer
CoherenceClusterRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
CoherenceServerLifeCycleRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
CoherenceServerLifeCycleTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ConnectorServiceRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
DataAccessRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Monitor Operator
DeployerRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following operations override all other security settings for this MBean: stop Only the following roles can invoke this operation: Admin Operator stop Only the following roles can invoke this operation: Admin Operator query Only the following roles can invoke this operation: Admin Operator start Only the following roles can invoke this operation: Admin Operator start Only the following roles can invoke this operation: Admin Operator
DeploymentManagerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DeploymentProgressObjectMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DeploymentTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: NotificationLevel Write access is granted only to the following roles: Admin Operator The following operations override all other security settings for this MBean: start Only the following roles can invoke this operation: Admin Operator
DomainRuntimeMBean	The following operations override all other security settings for this MBean: restartSystemResource Only the following roles can invoke this operation: Admin Operator
DomainRuntimeServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: All roles
EditSessionConfigurationManagerMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
EditSessionConfigurationRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
EJBComponentRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
EJBPoolRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
EJBTransactionRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsApplicationRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsExceptionMapperStatisticsRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsExecutionStatisticsRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsMonitoringInfoRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsResourceConfigTypeRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsResourceMethodBaseRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsResourceMethodRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsResourceRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsResponseStatisticsRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsSubResourceLocatorRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JaxRsUriRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
JMSRemoteEndpointRuntimeMBean	The following operations override all other security settings for this MBean: resumeForwarding Only the following roles can invoke this operation: Admin Operator pauseIncoming Only the following roles can invoke this operation: Admin Operator sort Only the following roles can invoke this operation: Admin Operator Monitor resumeIncoming Only the following roles can invoke this operation: Admin Operator getMessages Only the following roles can invoke this operation: Admin Operator Monitor pauseForwarding Only the following roles can invoke this operation: Admin Operator
LibDeploymentRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ManagedExecutorServiceRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ManagedScheduledExecutorServiceRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ManagedThreadFactoryRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
PartitionLifeCycleRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
PartitionLifeCycleTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
PartitionRuntimeMBean	The following operations override all other security settings for this MBean: shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator lookupApplicationRuntime Only the following roles can invoke this operation: Admin Deployer suspend Only the following roles can invoke this operation: Admin Operator forceShutdown Only the following roles can invoke this operation: Admin Operator shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator forceSuspend Only the following roles can invoke this operation: Admin Operator getRgState Only the following roles can invoke this operation: Admin Deployer Operator shutdown Only the following roles can invoke this operation: Admin Operator resume Only the following roles can invoke this operation: Admin Operator suspend Only the following roles can invoke this operation: Admin Operator suspendResourceGroup Only the following roles can invoke this operation: Admin Operator suspendResourceGroup Only the following roles can invoke this operation: Admin Operator resumeResourceGroup Only the following roles can invoke this operation: Admin Operator shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator shutdown Only the following roles can invoke this operation: Admin Operator startResourceGroup Only the following roles can invoke this operation: Admin Operator forceSuspendResourceGroup Only the following roles can invoke this operation: Admin Operator forceShutdownResourceGroup Only the following roles can invoke this operation: Admin Operator startResourceGroupInAdmin Only the following roles can invoke this operation: Admin Operator shutdown Only the following roles can invoke this operation: Admin Operator
RequestClassRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ResourceGroupLifeCycleRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ResourceGroupLifeCycleTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
RuntimeServiceMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: All roles
SAFAgentRuntimeMBean	The following operations override all other security settings for this MBean: resumeForwarding Only the following roles can invoke this operation: Admin Operator resumeReceiving Only the following roles can invoke this operation: Admin Operator pauseReceiving Only the following roles can invoke this operation: Admin Operator pauseIncoming Only the following roles can invoke this operation: Admin Operator pauseForwarding Only the following roles can invoke this operation: Admin Operator resumeIncoming Only the following roles can invoke this operation: Admin Operator
SAFMessageCursorRuntimeMBean	The following operations override all other security settings for this MBean: sort Only the following roles can invoke this operation: Admin Operator Monitor
SAFRemoteEndpointRuntimeMBean	The following operations override all other security settings for this MBean: resumeForwarding Only the following roles can invoke this operation: Admin Operator pauseIncoming Only the following roles can invoke this operation: Admin Operator sort Only the following roles can invoke this operation: Admin Operator Monitor resumeIncoming Only the following roles can invoke this operation: Admin Operator getMessages Only the following roles can invoke this operation: Admin Operator Monitor pauseForwarding Only the following roles can invoke this operation: Admin Operator
ServerLifeCycleRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ServerLifeCycleTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
ServerRuntimeMBean	The following operations override all other security settings for this MBean: isServiceAvailable Only the following roles can invoke this operation: All roles shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator getIPv6URL Only the following roles can invoke this operation: All roles lookupApplicationRuntime Only the following roles can invoke this operation: Admin Deployer start Only the following roles can invoke this operation: Admin Operator forceShutdown Only the following roles can invoke this operation: Admin Operator shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator getRgState Only the following roles can invoke this operation: Admin Deployer Operator shutdown Only the following roles can invoke this operation: Admin Operator getIPv4URL Only the following roles can invoke this operation: All roles resume Only the following roles can invoke this operation: Admin Operator resumeResourceGroup Only the following roles can invoke this operation: Admin Operator shutdownResourceGroup Only the following roles can invoke this operation: Admin Operator getURL Only the following roles can invoke this operation: All roles shutdown Only the following roles can invoke this operation: Admin Operator forceShutdownResourceGroup Only the following roles can invoke this operation: Admin Operator shutdown Only the following roles can invoke this operation: Admin Operator
ServletRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
SingletonEJBRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
StatelessEJBRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
SystemComponentLifeCycleRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
SystemComponentLifeCycleTaskRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebAppComponentRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebServerRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebsocketApplicationRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebsocketBaseRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebsocketEndpointRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WebsocketMessageStatisticsRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WLDFAccessRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Monitor Operator
WLDFDataAccessRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Monitor Operator
WLDFPartitionAccessRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Monitor Operator
WorkManagerRuntimeMBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Operator
WSRMRemoteEndpointRuntimeMBean	The following operations override all other security settings for this MBean: resumeForwarding Only the following roles can invoke this operation: Admin Operator pauseIncoming Only the following roles can invoke this operation: Admin Operator sort Only the following roles can invoke this operation: Admin Operator Monitor resumeIncoming Only the following roles can invoke this operation: Admin Operator getMessages Only the following roles can invoke this operation: Admin Operator Monitor pauseForwarding Only the following roles can invoke this operation: Admin Operator

System Module MBeans

The following table lists the system module MBeans that override the default security settings. System module MBeans configure modules that have been deployed independently of other enterprise applications and are therefore available as resources to all applications on a server.

ApplicationLifecycleListenerBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ClientParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ClientSAFBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceAddressProviderBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceAddressProvidersBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceApplicationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceCacheBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceClusterParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceClusterWellKnownAddressBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceClusterWellKnownAddressesBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceIdentityAsserterBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceInitParamBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceKeystoreParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceLoggingParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceServiceBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
CoherenceSocketAddressBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ConfigResourceOverrideBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ConfigurableCacheFactoryConfigBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DefaultDeliveryParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DefaultPersistentStoreBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DefaultSAFAgentBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DeliveryFailureParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DeliveryParamsOverridesBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DeploymentPlanBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DestinationKeyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DistributedDestinationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DistributedDestinationMemberBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DistributedQueueBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
DistributedTopicBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ExternalResourceOverrideBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
FlowControlParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ForeignConnectionFactoryBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ForeignDestinationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ForeignJNDIObjectBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ForeignServerBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
GroupParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
InitParamBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
InitParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCConnectionPoolParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCDataSourceBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCDataSourceParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCDriverParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: PasswordEncrypted Read access is granted only to the following roles: Admin Deployer Password Read access is granted only to the following roles: Admin Deployer
JDBCOracleParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: OnsWalletPasswordEncrypted Read access is granted only to the following roles: Admin Deployer OnsWalletPassword Read access is granted only to the following roles: Admin Deployer
JDBCPropertiesBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JDBCPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer Exceptions: The following attributes override all other security settings for this MBean: EncryptedValueEncrypted Read access is granted only to the following roles: Admin Deployer EncryptedValue Read access is granted only to the following roles: Admin Deployer
JDBCXAParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
JMSConnectionFactoryBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
LoadBalancingParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
MessageLoggingParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ModuleDescriptorBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ModuleOverrideBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
MulticastParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
NamedEntityBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
PersistenceConfigurationPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
PropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
QueueBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
QuotaBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ResourceDeploymentPlanBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFErrorHandlingBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFImportedDestinationsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFLoginContextBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFQueueBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFRemoteContextBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SAFTopicBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
SecurityParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
TemplateBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
ThresholdParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
TopicBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
TransactionParamsBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
UniformDistributedQueueBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
UniformDistributedTopicBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
VariableAssignmentBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
VariableBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
VariableDefinitionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WeblogicCohAppBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WeblogicCoherenceBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFArrayPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFConfigurationPropertiesBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFConfigurationPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFEncryptedPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFHarvestedTypeBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFHarvesterBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFImageNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFInstrumentationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFInstrumentationMonitorBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFJMSNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFJMXNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFLogActionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFPropertyBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFResourceBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFRESTNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFScaleDownActionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFScaleUpActionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFScalingActionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFScheduleBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFScriptActionBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFSMTPNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFSNMPNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFWatchBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer
WLDFWatchNotificationBean	The following roles have read, write, and invoke permission for all non-encrypted attributes and operations in this MBean: Admin Deployer