structural authorization question

when selecting field "Maint" in transaction OOSP, it means that function codes classed as "maintaining" in table T77FC can also be executed for the authorized objects. I have a requirement to create a profile that will work for one function code but not for another. Example: Profile should allow users to ASSIGN any qualification object to users, but to CREATE qualifications only under a specific qualification group object. When I select "maint", it applies to both ASSIGN and CREATE.

how can this be done?