All other users logged in on any workstation

user default cpu=@ + logon=@

###########################################################
# APPLIES TO ALL OTHER USERS LOGGED IN ON ANY 
# WORKSTATION.
user default  cpu=@ + logon=@ 
begin
#  OBJECT     ATTRIBUTES       ACCESS CAPABILITIES
# ----------  ------------     ----------------------
job           cpu=@             access=@
schedule                        access=@
resource                        access=@
prompt                          access=@
file                            access=@
calendar                        access=@
cpu           cpu=@             access=@
parameter     name=@ ~ name=r@  access=@
userobj       cpu=@ + logon=@   access=@
eventrule     name=@            access=add,delete,display,modify,list,unlock
action        provider=@        access=display,submit,use,list
event         provider=@        access=use
report        name=@            access=display  
runcygrp      name=@            access=add,delete,display,modify,use,list,unlock
vartable      name=a@,$default  access=add,delete,display,modify,use,list,unlock
wkldappl      name=@            access=add,delete,display,modify,list,unlock
lob           name=@            access=use
end
###########################################################

They are given unrestricted access to all objects, except parameters that have names beginning with r. They are the only ones who can generate all kinds of plans and who can create, update, and delete event rule definitions. All users have access to all variable tables beginning with "a" and to the default table, irrespective of the default variable table name.