APPS grants and best practices

Hello, where can I find documentation about APPS user best practices on EBS?

i.e. Should/must APPS user have all privileges on all GL, AR, AP,  . . .  objects with grant option?

Something like "GRANT SELECT, INSERT, UPDATE, DELETE, REFERENCES, INDEX, ALTER, ON COMMIT REFRESH, QUERY REWRITE, DEBUG, FLASHBACK ON AP.AP_SUPPLIER_SITES_ALL TO APPS WITH GRANT OPTION;"

i.e. Who should/must have APPS password? Development group, administration group, . . . .?

Thank you so much.