These user ids come with the system. These profiles are proliferated onto every system that OneWorld is installed on.
If you want, you can set them up to do anything in OneWorld. That said, ONEWORLD is the user that should be used to start services. If you secure your DB, the user profile that starts the services needs to have authority to the tables in the services data source. You can disable this profile if you create another to start services, but don't delete the profile. On the iSeries this profile does not need ALLOBJ authority, just JOBCTL. OneWorld services objects loaded onto the iSeries are shipped with ONEWORLD as the *OWNER.
JDE should be used only as an installation profile. OneWorld objects on the iSeries in all other data sources other than the services objects are owned by JDE, so it is a powerful profile that should not be used for signing onto iSeries and also does not need to have ALLOBJ authority. You can create another system user with ALLOBJ to use with the OneWorld profile JDE for upgrades.
