What commands should have ALWLMTUSR(*YES)?

In general I understand that people without command line access should not
have access to commands, except for a few with ALWLMTUSR(*YES).
An example of one that most people have access to is SIGNOFF.
And some could even argue against that. For example, no, I want them to
only run it from our whiz bang menu which logs their joblog to a PDF and
emails it to me.

But, in general, what commands should be that way?

And I am not willing to accept IBM defaults. For example, does the
general user population need access to EXPORTFS? "Hey, let's set up a
samba share of the root directory!" Then again, maybe it was only changed
this way on this lpar for some reason lost to time. Because it's not that
way on this other lpar that's newer and less modified.
But I digress...

If I do a Sys-Req 4 to see my messages do I need command line access to
DSPMSG?
If I do a Sys-Req 3 to see my job attributes do I need command line access
to DSPJOB?
If, after doing the Sys-Req 3, I take option 10 to look at the joblog do I
need command line access to DSPJOBLOG?




Rob Berendt