https://answers.axonivy.com/questions/4325/java-mission-controller-flight-recorder-access-denied<p>Dear Ivy Team</p> <p>Doing some performance analysis since our app is using a lot of CPU. I've activated</p> <p>JAVA_OPTS="$JAVA_OPTS -Dcom.sun.management.jmxremote.port=9003 -Dcom.sun.management.jmxremote.login.config=jmx -Djava.security.auth.login.config=configuration/jaas.config -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.autodiscovery=true"</p> <p>JAVA_OPTS="$JAVA_OPTS -Djava.rmi.server.hostname=&lt;ip&gt;"</p> <p>When I connect with Java Mission Controller to Ivy 7 I get the following results :</p> <ul> <li>Start JMX Console : works</li> <li>Start Flight Recorder : Access denied! Invalid access level for requested MBeanServer operation.</li> </ul> <p>java.lang.RuntimeException: Access denied! Invalid access level for requested MBeanServer operation. at com.jrockit.mc.flightrecorder.controlpanel.ui.FlightRecorderProvider.refresh(FlightRecorderProvider.java:110) at com.jrockit.mc.browser.views.JVMBrowserView$1.run(JVMBrowserView.java:100) at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308) at Caused by: java.lang.SecurityException: Access property for this identity should be similar to: readwrite create com.sun.management.MissionControl at ....</p> <p>According to <a href="https://community.oracle.com/thread/2588377">https://community.oracle.com/thread/2588377</a> :</p> <p>You need to ensure that the user you want to access the flight recorder has permission to create the relevant MBeans. You have probably defined the roles in the jmxremote.access file. Try adding:</p> <p>&lt;your-role-name-goes-here&gt; readwrite \ create com.sun.management.<em>,com.oracle.jrockit.</em> \ unregister</p> <p>=&gt; where can I change this for Ivy ?</p> <p>Thanks &amp; Regards John</p>enTue, 24 Mar 2020 11:20:19 -0400https://answers.axonivy.com/questions/4325/java-mission-controller-flight-recorder-access-denied/4469<p>Hi John </p> <p>You are right if you want to access JFR from Java Mission Control on a remote machine then you have to enable this in the jmxremote.access file as follows:</p> <p>Change from:</p> <pre><code>monitorRole readonly controlRole readwrite \ create javax.management.monitor.*,javax.management.timer.* \ unregister </code></pre> <p>to:</p> <pre><code>monitorRole readonly controlRole readwrite \ create javax.management.monitor.*,javax.management.timer.*,com.sun.management.*,com.oracle.jrockit.* \ unregister </code></pre> <p>as described in the articel <a href="https://community.oracle.com/thread/2588377">https://community.oracle.com/thread/2588377</a></p> <p>The file can be found here:</p> <p>Windows:</p> <p>Axon.ivy Engine &lt; 7.4: {engine installation dir}/jre/lib/management/jmxremote.access</p> <p>Axon.ivy Engine &gt;= 7.4: {engine installation dir}/jre/conf/management/jmxremote.access</p> <p>Linux:</p> <p>Axon.ivy Engine &lt; 7.4: {java installation dir}/jre/lib/management/jmxremote.access</p> <p>Axon.ivy Engine &gt;= 7.4: {java installation dir}/conf/management/jmxremote.access</p>Reto WeissTue, 24 Mar 2020 11:20:19 -0400https://answers.axonivy.com/questions/4325/java-mission-controller-flight-recorder-access-denied/4469https://answers.axonivy.com/questions/4325/java-mission-controller-flight-recorder-access-denied/4326<p>Follow this guide to login with your ivy admin user.: <a href="https://developer.axonivy.com/doc/7.0.14/EngineGuideHtml/monitoring.html#monitoring-jmx">https://developer.axonivy.com/doc/7.0.14/EngineGuideHtml/monitoring.html#monitoring-jmx</a></p>Alex SuterFri, 24 Jan 2020 08:12:06 -0500https://answers.axonivy.com/questions/4325/java-mission-controller-flight-recorder-access-denied/4326