I haven't yet upgraded to SP8, but I'm wondering if this service pack resolves the issue of Delta Handling for Role/Profile Assignments ?
Specifically I'm referring to the issue outlined in SAP Note# 1626816:
You use SAP NetWeaver Identity Management and its SAP provisioning framework to manage the role and profile assignments of users in AS ABAP systems.
After adding and/or removing some assignment in the Identity Center, the change documents for the affected user in the AS ABAP system show the following: The system unassigned all already assigned roles and/or profiles and, immediately afterwards, assigned the complete new list of roles and/or profiles.
In addition, after such a change, all changes to the role and profile assignments that you have made for the affected user directly in the AS ABAP system have been reverted again. For instance, if you have added another role to the user in the AS ABAP system using transactions like SU01, after the provisioning, the user no longer has this role.
Two other SCN links give more details on the issue:
SCN question specifically about ABAP roles being removed in provisioning
and a proposed resolution:
Delta roles blog by Kai Ulrich
Has anyone found that SP8 to have resolved this?