TWS_users and root users logged in on any workstation other than any domain manager

user sm ~CPU=$MANAGER logon=TWS_user,root

###########################################################
# APPLIES TO TWS_users AND ROOT USERS LOGGED IN ON ANY 
# WORKSTATION OTHER THAN THE MASTER DOMAIN MANAGER. 
user sm  logon=TWS_user,root
begin
#  OBJECT     ATTRIBUTES       ACCESS CAPABILITIES
# ----------  ------------     ----------------------
job           cpu=$thiscpu     access=@
schedule      cpu=$thiscpu     access=@
resource      cpu=$thiscpu     access=@
prompt                         access=@
calendar                       access=@
cpu           cpu=$thiscpu     access=@
parameter     cpu=$thiscpu 
              ~ name=r@        access=@
action        provider=@       access=display,submit,use,list
event         provider=@       access=use
report        name=RUNHIST,RUNSTATS  access=display  
runcygrp      name=@            access=add,delete,display,modify,use,list,unlock
file          name=globalopts  access=display
lob           name=@            access=use
end

This user definition applies to TWS_users and root users to whom definition (1) does not apply, which are those who are logged in on any workstation other than the master domain manager or any other domain manager. They are given unrestricted access to all objects on their login workstation. Note that prompts, files, and calendars are global in nature and are not associated with a workstation.

They can use event rules, but are not allowed to create, update, or delete event rule definitions.