Restrict in T-code RSU01

Hi Gurus,

we have implemented BI7.0

and we have created pfcg roles and RSECADMIN authorizations

I didnt used S_RS_AUTH in PFCG

as it is not helpful for our env.

as our env. is very big and we have around around 150 rsecadmin authorization objects for different plants

we have site admin for each plant so i have created roles for site admins and i have given RSU01 instead of RSECADMIN to asign authroizations

so now my problem is they can assign any authorization object to users of different plants including 0BI_ALL

i didnt find any object to restirct in RSU01

is there anyway i can restirct them to assigning 0BI_ALL or other plant authroizations

please help me its urgent

Thanks,

kishore