TWS_users and root users logged in on any workstation other than any domain manager

user sm ~CPU=$MANAGER logon=TWS_user,root

###########################################################
# APPLIES TO TWS_users AND ROOT USERS LOGGED IN ON ANY
# WORKSTATION OTHER THAN THE MASTER DOMAIN MANAGER.
user sm  logon=TWS_user,root
begin
#  OBJECT     ATTRIBUTES       ACCESS CAPABILITIES
# ----------  ------------     ----------------------
job           cpu=$thiscpu + folder = /   + cpufolder = / access=@
schedule      cpu=$thiscpu + folder = /   + cpufolder = / access=@
resource      cpu=$thiscpu  + folder = / + cpufolder = /  access=@
prompt        + folder = /       access=@
calendar      + folder = /                 access=@
cpu           cpu=$thiscpu + folder = /    access=@
parameter     cpu=$thiscpu ~ name=r@ + folder = /  + cpufolder = /   access=@
action        provider=@       access=display,submit,use,list
event         provider=@       access=use
report        name=RUNHIST,RUNSTATS  access=display
runcygrp      name=@    + folder = /   access=add,delete,display,modify,use,list,unlock
file          name=globalopts   access=display
lob           name=@            access=use
folder        name=/myfolder    access=@
end

This user definition applies to TWS_users and root users to whom definition (1) does not apply, which are those who are logged in on any workstation other than the master domain manager or any other domain manager. They are given unrestricted access to all objects on their login workstation. Note that prompts, files, and calendars are global in nature and are not associated with a workstation.

They can use event rules, but are not allowed to create, update, or delete event rule definitions.