I used SWIM and then "Role" >> By Transaction "ES62". I could find several role including this transaction. I am sure I am somewhere mistaking from what you are are trying to suggest. I am not certain how to find out the Auth. code which I need to restrict. Also, if I use the transaction you suggested, it takes me to Role by complex selection criteria. What details do I need to fill there?
Piyush