All other users logged in on any workstation

user default cpu=@ + logon=@

###########################################################
# APPLIES TO ALL OTHER USERS LOGGED IN ON ANY 
# WORKSTATION.
user default  cpu=@ + logon=@ 
begin
#  OBJECT     ATTRIBUTES       ACCESS CAPABILITIES
# ----------  ------------     ----------------------
job           cpu=@  + folder = /  + cpufolder = / access=@
schedule      cpu=@  + folder = /  + cpufolder = / access=@
resource      + folder = /  + cpufolder = /                  access=@
prompt        + folder = /                  access=@
file                            access=@
calendar      + folder = /                  access=@
cpu           cpu=@   + folder = /  access=@
parameter     name=@ ~ name=r@  + folder = /  + cpufolder = / access=@
userobj       cpu=@ + logon=@   + cpufolder = / access=@
eventrule     name=@  + folder = / access=add,delete,display,modify,list,unlock
action        provider=@        access=display,submit,use,list
event         provider=@        access=use
report        name=@            access=display  
runcygrp      name=@            access=add,delete,display,modify,use,list,unlock
vartable      name=a@,$default  + folder = / access=add,delete,display,modify,use,list,unlock
wkldappl   name=@   + folder = /   access=add,delete,display,modify,list,unlock
lob           name=@            access=use
folder        name=/            access=@
end
###########################################################

They are given unrestricted access to all objects, except parameters that have names beginning with r. They are the only ones who can generate all kinds of plans and who can create, update, and delete event rule definitions. All users have access to all variable tables beginning with "a" and to the default table, irrespective of the default variable table name. Access to most scheduling objects is limited to those defined in the root (/) folder.