Authorization group changes for Security reason

In Production sometimes I have to give access to "table" transaction like SM30 in modification.

When the authorization group is restricted to few tables, I can give access.

But some transactions are linked to views with LARGE authorization group like &NC& or VC.

So if I give access in change on S_TABU_DIS in &NC& or VC or others standards authorizations group, I potentially give the change access to others tables, so Ineed to restrict the access to SAP tables...

What do your recommend? What is the SAP best practices on this issue?

--> Change the standard authorization group to a specific one?

OR

--> Create a specific view with a specific authorization group and Create a specific transaction in this view?

Thanks a lot in advance for your answer.

Mélanie