PI7: Missing roles for PIREPUSER

SND-ers,

I have the following problem. Right after installation and performing all post-installation steps for NW04s (SP6) + PI7.0, I get troubles with Integration Repository application when importing software component versions from SLD (HTTP 403 forbidden).

I run exchange profile editor and change PIREPUSER to PISUPER -- after this change import completed successfully (ok, at least list of components was shown 😉 So there are should not be an issue with inactive ICF services.

So my question is: what roles / permissions / etc are missing for PIREPUSER created by installation?

VS