I created a new role called LPAApproverMaint_HLM (to differentiate it from the _ST roles provided by Infor).
Added existing security classes in PROD product line – ProcessServerUserAdmin_ST and ProductLineAccess_ST.
The manual showed which business classes these cover, and it looks just right to me.
Then assigned the role to my user, and it works well for him.