How do you limit Firefighter "Owner" authorization...

In order to allow a firefighter ID owner to assign firefighters to that ID, you must give a user 02 for object ZVFAT_0001. Owner then needs the S_TABU_DIS with 02 for ZV&X to update the firefighters table. That works, however the owner can now update ALL entries in that table (i.e. assign a user to another owner's firefighter ID).

According to the documentation (note 1025241), you should give 36 activity for object ZVFAT_0001 to utilize "extended maintenance". I have done this, and the SU53 wants 02 to update. There is no other documentation anywhere.

Does anyone have a work around for this?