Request to consider the automation of Check and correct the permission of <Default User> user id in Tivoli Enterprise Portal.

For Kyndryl, there is a requirement from IBM Tivoli Monitoring (ITM) - Annual Review for Technical Specifications with NO CIS Benchmark, it is required to automate the following operation for <Default User> on TEPS:
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• View"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Modify"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Manage"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Start/Stop"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Close"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Acknowledge"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Configure"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Launch"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Author Mode Eligible"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Administration Mode Eligible"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Workspace Administration Mode"
"Deny the following privileges throughout the entire Tivoli Enterprise Portal Authorities tree.
• Workspace Author Mode"
Remove all entries except for "Tivoli Enterprise Monitoring Server" from the Allowed Applications list.
Remove all entries except for "Logical" from the Assigned Views list.

Can you please enhance the feature to consider the automation of Check and correct the permission of <Default User> user id in Tivoli Enterprise Portal ?

The default user can be used as a template for new user creation, the default userid should be created from sysadmin user. What I mean is: how to use command line to create the default userid and modify the permission of default userid. I find the command "tacmd createUser" and "tacmd editUser" from the following website:

https://setgetweb.com/p/tm/command_reference.html#56

But I cannot find the details about how to edit the user permission for TEPS user. for example: How to set the "Modify" permission only for the user ? How to check the default userid with correct permission ?