• There is no mention of `etc/jolokia-access.xml` in our document.
• We provided `etc/jolokia-access.xml` as default for Karaf environment so users don't need to create XML or modify ./bin/setenv. The document (1) is already outdated.

(1) Apache Karaf Security Guide > Chapter 6. Securing the Management Console
https://access.redhat.com/documentation/en-us/red_hat_fuse/7.2/html-single/apache_karaf_security_guide/#HawtioSecurity
~~~
Create an access management file called access-management.xml in <installDir>/etc/.
...
Add the following line to Fuse config script ./bin/setenv, adding the path to the access management file.

export EXTRA_JAVA_OPTS='-Djolokia.policyLocation=file:etc/access-management.xml'
~~~