You could look at who has authority to ADDJOBSCDE, CHGJOBSCDE, WRKJOBSCDE. If someone has authority to these commands they can Add, Change, Delete, etc. If you do not want them to have this authority, you could just have them with authority to DSPJOBSCDE. This way they can view any job but not make any changes.
*JOBSCD means…A job schedule entry (*JOBSCD) object contains entries (specific dates and
times) when batch jobs will be submitted to a job queue.
If a user can run jobs, there should be no need to be concerned about the job scheduler. A user can’t do anything with the scheduler that they can’t do with any job. They can’t work with other users’ jobs.
The issue is whether or not you give ‘special authorities’ to your users. If they don’t have *JOBCTL special authority, they can’t affect jobs that aren’t their own.
The answer is not to give special authorities to users who don’t need them. And if they need *JOBCTL, then the job scheduler should be part of their jobs.