Authorization for converting Customers/Vendors to BP

Hello,

We need to convert customers/vendors to BP. So do the person doing the conversion through T code MDS _LOAD_cockpit, needs to have auth to create BP too ?. we want auth to be in place for BP creation when a user converts a customer/vednor to BP in ECC. that means user will not use BP t code but will only convert cust/vend to BP.

How can auth be provided in such cases ? I need to write functional specs for the same ?

Second point, we want users to onyl display BP using T code BP. How to provide auth in such cases ? Will the auth provided for the first point means that a user will automatically gets access to T code BP too ?

rgds

sachin