When doing authenticated remote JMX connections to the Flight Recorder in Oracle JDK, the predicates required for the readwrite permissions in the access file are as follows:
role readwrite \
create com.sun.management.*,com.oracle.jrockit.* \
unregister
Marcus Hirt indicated those MBeans, in his own words:, “from the JMX configuration hell”.