There have been a number of support cases for customers unclear on how to create a read-only user account for accessing the console. Since this seems to be a common customer requirement, the AMQ Broker doc should address this more clearly than it does now.