SAP PLMWebUI Roles

Dear Gurus,

I have one question,

I have one user XYZ,

I have assigned that user role "SAP_CA_DMS_DISPLAY".

Now as per my understanding this role should be sufficient to view this document in backend SAPGUI.

How ever authorisation is also checking it as PLMB objects and I found that I need to give SAP_PLMWUI_TRUSTED_USER_ALL role as well.

Is this normal / correct? Does that mean post implementation of PLMWebUI , we need to give this trusted user even if we want to access objects only in backend?

Thanks in advance