I have done generation via PFCG and verified user assignment & role object by SUIM & PFCG.
I have never used SU56 before, but everything is green after I executed it.
I don't know what you mean about the asterisk. I added the asterisk myself in the PFCG authorization tab.
Regards,
Ashod