SolMan Roles for Basis

Hi,

What roles should a Basis person have in SolMan prod? We are implementing SM7 and have 2 Solman environments - dev and prod. The main use for this right now is the Maintenance Optimizer and no one outside of Basis and Security have access to these boxes. So far, the following roles have been used which we have renamed into our namespace:

SAP_MAINT_OPT_ADMIN

SAP_SM_BATCH

SAP_SM_SOLUTION_ALL

SAP_SMSY_ALL

SAP_SMSY_CTC_RT

SAP_SMSY_DIS

SAP_SMWORK_BASIC

SAP_SMWORK_BPM

SAP_SMWORK_CHANGE_MAN

SAP_SMWORK_LANDSCAPE_MAN

SAP_SMWORK_SETUP

SAP_SMWORK_SYS_ADMIN

SAP_SMWORK_SYS_MON

SAP_SOL_LEARNING_MAP_DIS

SAP_S_RFCACL

When we go live, what roles should they have? Should they be allowed to have SAP_ALL in prod?

Thanks,

Beth