Question 4 Replies 126 Views × Close popover Debraj Bhowmik (DebrajB9) ING Bank ING Bank BE View Profile Send Message DebrajB9 Member since 2017 7 posts ING Bank Posted: July 26, 2017 Last activity: August 16, 2017 Posted: 26 Jul 2017 3:56 EDT Last activity: 16 Aug 2017 11:03 EDT Closed Solved Read only WAS Login credential for SMA If a WAS Admin user has read only access, and that user is mapped to PegaDiagnosticUser role, will SMA work for that user? System Administration × Close popover Facebook Twitter Linkedin Email Copy Link Copied! Moderation Team has archived post, learn more × Close popover This thread is closed to future replies. Content and links will no longer be updated. If you have the same/similar Question, please write a new Question. Posted: 3 years ago Posted: 26 Jul 2017 4:21 EDT × Close popover Swarnendu Mukherjee (SwarnenduM) Infosys Technology Architect Infosys AU View Profile Send Message SwarnenduM Infosys replied to DebrajB9 For standalone SMA credential is not needed if you are not imposing additional security. However if you are using Admin user and password then you have to was user having access to was admin portal. Posted: 3 years ago Posted: 26 Jul 2017 5:03 EDT × Close popover Debraj Bhowmik (DebrajB9) ING Bank ING Bank BE View Profile Send Message DebrajB9 ING Bank replied to SwarnenduM We are using Remote Connection and Administrative (JMX/SOAP) Credentials when adding nodes in SMA. Will SMA work if this Administrative user in WAS has read only access? I found the WAS Admin user can be configured as read only like below: - Log in to web console as primary admin user - In Users and Groups > Manage users ensure that accounts for your additional users are present (via search) or create new users - Go to Users and Groups > Administrative user roles - Click Add , select given role (Monitor for read only use, Administrator for full access), search for required users, select them and click Arrow button - Click OK, and Save Posted: 3 years ago Posted: 8 Aug 2017 14:55 EDT × Close popover Diptiman Mazumder (Diptiman_GCS) PEGA Pegasystems Inc. View Profile Send Message Diptiman_GCS PEGA replied to DebrajB9 Yes, you should be able to use SMA with an user having Monitor role. Please refer the PDN article for more information https://pdn.pega.com/support-articles/error-500-exception-occured-trying-invoke-sma Accepted Solution Posted: 3 years ago Posted: 16 Aug 2017 11:03 EDT × Close popover Debraj Bhowmik (DebrajB9) ING Bank ING Bank BE View Profile Send Message DebrajB9 ING Bank replied to DebrajB9 Below is the answer from Pega: It is possible to successfully access SMA using an operator with Admin user who only has the Monitor role. Further investigation has led to this security policy: \APP-INF\lib\prresources\prenginesecurity.policy The relevant permission is granted at line 46 (or so): permission com.ibm.websphere.security.WebSphereRuntimePermission "AdminPermission"; As long as the operator has AdminPermission, that operator will be able to access the JMX mbeans and will be able to get into SMA.