Requirement is that users have access to all jobs except jobs starting with LUP while other users ONLY have access to LUP jobs.
Following scenario created
4 users and 4 groups created and placed each user into a group.
user1 belongs to Group-R
user2 belongs to Group-RX
user3 belongs to Group-RW
user4 belongs to Group-RWX
user1, user2 & user3 needs access to everything except jobs starting with LUP
user3 needs access to jobs starting with LUP and no access to the rest
jobname user1 user2 user3 user4
LUP_job1 deny deny allow deny
ABC_job1 allow allow deny allow
Release : 12
Component : WA AE/AUTOSYS RELATED EEM
Following 3 policies created to obtain the desired results.
1. an "Explicit Denies" as-job policy as follows
2. 2 "Explicit Grants" as-job policies
a) allow access to all jobs for every one except for user 3 who is part of Group-RW
b) allow access to all LUP jobs ONLY for user 3 who is part of Group-RW