Which default user has full read/write access?

Monitor is a default read-only role in Check Point - it can view logs and policies but cannot create or modify any configuration, so it explicitly lacks write access.

Altuser is not a standard default user account defined in Check Point Security Management and does not correspond to any built-in role with documented access levels.

The Administrator account is created during Check Point Security Management initial setup and is granted full read/write permissions over all policies, objects, and management functions by default. It serves as the primary administrative identity, and its permission profile allows creating, modifying, and deleting any configuration - unlike restricted default roles that only allow read access.

Superuser is not a named default user account within Check Point's management interface - while the term exists in Linux contexts on the underlying OS, Check Point's built-in full-access management account is called Administrator.