BPC NW 10 standard roles to run data manager package

Hi,

We have setup BPC NW 10 environment recently. Users are not able to run the data manager package unless we provide them SAP_ALL access in the backend.

I'm just wondering if we have any standard roles(SAP BACK END) that will give access to run data manager package, user is part of admin team and have all task and member access profiles.

I looked at the security guide but couldn't find much info on giving access for data manager package.

Also how can we disable user logon to backend system, I tried deactivating the password that couldn't help.

Thanks in advance.

Bob