# Simple authorization using an access file

Some JVMs support a simple access file system for controlling JMX access.

An access file is formatted the same way as password files (described in Enabling remote JMX with password authentication only), and associates roles with an access level. Valid access levels are `readonly` and `readwrite`:

- The `readonly` level only allows the JMX client to read an MBean's attributes and receive notifications.
- The `readwrite` level also allows setting attributes, invoking operations, and creating and removing MBeans.

To use an access file for JMX authorization, specify the name of the access file using a system property upon JVM startup:

    -Dcom.sun.management.jmxremote.access.file=jmxremote.access

The contents of such an access file may look like this:

    monitorRole   readonly
    controlRole   readwrite

For more information, see "Monitoring and Management Using JMX Technology" at http://docs.oracle.com/javase/7/docs/technotes/guides/management/agent.html .

Parent topic: Enabling and disabling JMX
Related reference
Enabling remote JMX with no authentication or SSL
Enabling remote JMX with password authentication only
Enabling remote JMX with password authentication and SSL
Fine-grained authorization using a security policy
Disabling access to MBeans