Hi Anand,
Nice to see , you are taking care of Technical,Functional and Authorization unlike me.
But anyway , you can give those through a role.. create a role assing those T-code access PA30 and PA40 to it and assing to the users.. so they will have only access to this T-code ,
you can drill down further if you need personnel area level as well..
Thanks
Sriram