grant codebase "file:/-" {
    permission javax.management.remote.SubjectDelegationPermission "javax.management.remote.JMXPrincipal.monitorRole";
};

grant principal javax.management.remote.JMXPrincipal "monitorRole" {
    permission javax.management.remote.SubjectDelegationPermission "javax.management.remote.JMXPrincipal.delegate";
};