Hello Peter,
You have choice to maintain the t-codes into the ranges and add values as per your requirement into the files from - to (e.g. A* to O*). Whichever t-codes you want to restrict you can skip them from your ranges (e.g. PA10* to PA20* and then in next line you can maintain PA50*- Z*). In this example you can see we have restricted critical t-codes like PA30 & PA40.
Hope this will help you.
Thanks,
Shiv