How to create different roles when securing JMX mbeans in JBoss EAP 6 for admin, monitoring only, ...

Issue

• Users are looking for a way to secure JMX monitoring and for the ability to create different roles, eg:- admin, monitoring only.
• Users are setting up JMX monitoring for JBOSS production and would like to create a read only user for JMX client to access the JBOSS server.
• Users would like to run JMX remoting on a interface/port other than the native or management with different user_id, so that we don't have to give out Management console credentials and the ability to change deployed application settings.
• Is there a way to create a read-only JMX user in EAP 6?
• JConsole user with read-only access
• How to change the permissions of a JConsole user