TWS_users and root users logged in on any domain manager (other than the master)

user testerlondon cpu=$manager + logon=TWS_user,root

###########################################################
#     Sample Security File
###########################################################
# APPLIES TO TWS_users AND ROOT USERS LOGGED IN ON ANY
# DOMAIN MANAGER.
user testerlondon  cpu=$manager + logon=TWS_user,root
begin
#  OBJECT     ATTRIBUTES      ACCESS CAPABILITIES
# ----------  ------------    ----------------------
job           cpu=@           access=add,delete,display
schedule                      access=add,delete,display
resource                      access=@
prompt                        access=@
file          name=prodsked   access=build, display
file          name=trialsked  access=build, display
calendar                      access=@
cpu           cpu=@           access=@
parameter  name=@ ~ name=v@   access=@
userobj    cpu=@ + logon=@    access=@
eventrule       name=@        access=add,delete,display,modify,list,unlock
action     provider=@         access=display,submit,use,list
event      provider=@         access=use
report     name=@             access=display  
runcygrp      name=@            access=add,delete,display,modify,use,list,unlock
vartable   name=a@,$default   access=add,delete,display,modify,use,list,unlock
wkldappl      name=@            access=add,delete,display,modify,list,unlock
lob           name=@            access=use
end

This user definition applies to GUI and CLI access for TWS_users and root users logged into any domain manager other than the master. They are given unrestricted access to all objects, except parameters that have names beginning with v, and jobs and jobs streams to which they have limited access. They can generate all types of plans and can create, update, and delete event rule definitions.

All users have access to all variable tables beginning with "a" and to the default table, irrespective of the default variable table name.