User Profiles and roles for G type RFC destination connection.

Hi,

Any pointers for user profile and roles to be added for RFC destination 'G' type connection user.

This is for communication ECC system to PI for sending the message as ABAP Proxy SOAP XI3.0 to AAE...

Currently I have added following profiles.

a) SAP_XI_APPL_SERV_USER-- [PIAPPLUSER]

b) SAP_XI_DEVELOPER_J2EE

c) SAP_XI_IS_SERV_USER -- [PIISUSER]

still I am getting 403 forbidden error at ECC side while posting the message to PI.

When I checked the connection test in SM59 for the AAE destination at ECC side, then also there is 403 error.

I have restrictions in using the profile SAP_ALL. Please help me with all relevant user profiles to be added for this type user for my scenario.

Thanks

Ray...