Hi Ulrike,
Normally, it is SAPMEINTCTC who configures MESYS. So, if you have executed the CTC task, then you can find the list of assigned roles in Details section of SAPMEINT Standard Interfaces CTC task:
As concerns security policy, if you do not want to change password of MESYS, then you should set Technical.
Regards,
Sergiy