Hi,
Usually the account group auth is deemed sufficient, from your requirements I assume that you are already using F_KNA1_GRP and then need further granularity hence the problem with GEN.
It sounds to me like this is a problem with the custom code, what exactly is not working as expected? Is the check being performed? Where is it happening, before or after the standard checks?