Example 3

User administrator is granted add, modify, and display rights for all job definitions defined in the folder named "APPS" and any sub-folders, on workstations defined in the root (/) folder, and is therefore permitted to create and modify job definitions that run scripts or commands as needed, with no restriction:

USER TWSADMIN
CPU=@+LOGON=administrator
BEGIN
JOB CPU=@  + FOLDER = /APPS + CPUFOLDER = / ACCESS=ADD,MODIFY,DISPLAY,…
[…]
END

User sconnor is granted the same rights for jobs that match the condition jcltype=scriptname, which means that he can create or modify only job definitions that run scripts and cannot change any of them into a job that runs a command. He can also access all workstation defined in the root (/) folder:

USER RESTRICTED
CPU=@+LOGON=sconnor
BEGIN
JOB CPU=@+JCLTYPE=SCRIPTNAME  + FOLDER = /APPS + CPUFOLDER = / ACCESS=ADD,MODIFY,DISPLAY,…
[…]
END