if i wnat to create all authorization for Plant Maintainence(PM) can i copy from SAP_ALL and deactivate everything(100%) except only one auth obj- PM or do i need to keep any thing else?