Information
The JMX Console application must be secured so it is accessible by trusted administrators only. If this condition is not met, the application must be removed (deleted) from deployment.
Solution
Finally, configure the usersProperties defined in the application policy to manage accounts. Example editing JBOSS_HOME/server/@PROFILE@/conf/props/jmx-console-users.properties: