If you want to keep the default to be USERINQ for most people, you can use TMSXITS to change that to SYSPROG for specific USERIDs. This means coding the exit to verify which user is trying to access the TMC and then changing the password/profile value to SYSPROG. This is cumbersome to manage since it would have to be changed any time you add or remove a USERID from the list. We do not recommend making the default ISPFDEF to be SYSPROG since it has more authority than most people would need.
There is base code for TMSXITS in the CTAPSAMP library and there is a specific section in the code for changing the ISPF password/profile.