For each BE agent you can configure a JMX connector port for monitoring and management. 
To enable JMX update the CDD file and set property be.engine.jmx.connector.port=<portnumber> or update the tra file and add property java.property.be.engine.jmx.connector.port.
By default authentication is disabled for the JMX connection. 
 

TIBCO BusinessEvents (BE) - How to enable JMX authentication

All Operating Systems

To enable authentication add below property to the TRA or CDD file.

TRA:
java.property.be.engine.jmx.connector.authenticate=true

CDD:
be.engine.jmx.connector.authenticate=true

The authentication type configured with CDD properties below (add them to the cluster area of the CDD file).
be.auth.type=[file|ldap]

File based authentication:
be.auth.type=file
be.auth.file.location=<locationOfPasswordFile>

See:
https://docs.tibco.com/pub/businessevents-enterprise/6.1.0/doc/html/Default.htm#Administration/Common-Authentication-Properties.htm?TocPath=Administration%257CUser%2520Authentication%257CAuthentication%2520Configuration%257C_____4


LDAP authentication:
be.auth.type=ldap
See:
https://docs.tibco.com/pub/businessevents-enterprise/6.1.0/doc/html/Default.htm#Administration/LDAP-Authentication-Properties.htm?TocPath=Administration%257CUser%2520Authentication%257CAuthentication%2520Configuration%257C_____5