ESS Direct Deposit with role-based security

We have rolled out ESS direct deposit to a small group of employees and it works for laua users but not for role-based users.  Does anyone have a list of the exact tables and tokens that the user needs access to in order for direct deposit updates to work?  So far we think BANKFILE, EMACHDEPST, EMPLOYEE, PREMPBANK, PRSYSTEM, and maybe EMSTATUS?  We know PR12.1 and HR11.1 (for the auto deposit update) are needed.  But we must be missing something in the role-based setup and are wondering if anyone has an exact listing.