User Authorization for IE4N transaction

Dear Experts,

I have an query regarding the user authorization at transaction IE4N. It is but obvious in standard SAP that person authorized to Do IE4N should be authorized for Transaction IE02 & IL02 (Equipment and Functional Location Change).

But my requirement is slightly different I want the end user (Bottom Most level) to be authorized to operate transaction IE4N but he should not have authorizations for operating IE02 & IL02 Directly.

Any Clues how I can do it?

Thanks In Advance....!!