Hi Yaso
My first question is why do you need to build such a role? If you are building production roles for entire menu then this calls out Segregation of Duties issues
The reality is yes it is hard to maintain PFCG authorization as the empty proposals are based on SU24 data.
The hard piece of security is not using PFCG. It's knowing what to maintain in it. It sounds like you just want to tick and click away until everything flags green without any appreciation to the business risks.
If you are just trying to get something up and running, or non production space, etc the creative way is to save the profile with empty proposals. Afterward, download the role and maintain asterisk for the values via XLS/notepad. Afterwards upload your role and then generate the profile.
However, mass updating with asterisk will:
- In some areas give you more permissions than necessary for that part of the menu
- In other transactions, give you insufficient if SU24 has not proposed the authorisation that you need
There is no "fast" way to do what you are trying to do. Please consider your actual requirements.
Regards
Colleen