TWS_users and root users logged in on the master domain manager

user mastersm cpu=$master + logon=TWS_user,root

###########################################################
#     Sample Security File
###########################################################
# APPLIES TO TWS_users AND ROOT USERS LOGGED IN ON THE
# MASTER DOMAIN MANAGER.
user mastersm  cpu=$master + logon=TWS_user,root
begin
#  OBJECT     ATTRIBUTES        ACCESS CAPABILITIES
# ----------  ------------      ----------------------
job           cpu=@             access=@
schedule                        access=@
resource                        access=@
prompt                          access=@
file                            access=@
calendar                        access=@
cpu           cpu=@             access=@
parameter     name=@ ~ name=r@  access=@
userobj       cpu=@ + logon=@   access=@
eventrule     name=@            access=add,delete,display,modify,list,unlock
action        provider=@        access=display,submit,use,list
event         provider=@        access=use
report        name=@            access=display  
runcygrp      name=@            access=add,delete,display,modify,use,list,unlock
vartable      name=a@,$default  access=add,delete,display,modify,use,list,unlock
wkldappl      name=@            access=add,delete,display,modify,list,unlock
lob           name=@            access=use
end

This user definition applies to GUI and CLI access for TWS_users and root users logged into a master domain manager. They are given unrestricted access to all objects, except parameters that have names beginning with r. Access to the r parameters is given only to users in the mis group. They are the only ones who can generate all kinds of plans and who can create, update, and delete event rule definitions.

All users have access to all variable tables beginning with "a" and to the default table, irrespective of the default variable table name.