Hi
Please find below security guide for same.
https://websmp105.sap-ag.de/~sapidb/012002523100016646822015E/SM_SEC_GUIDE_71SP14.pdf
Every role is clearly mentioned.
The above guide is for SP14, you can find the security guides for other levels from below
I hope it will resolve your issue.
Thanks
Rishav