Please help on SA38

Hello,

I tried searching on this forum, but could not find an answer to my question. I am an auditor and I have been assigned the following access at my company:

T-Code: SA38

S_PROGRAM: SUBMIT

Authorization: *

Based on my limited understanding, this access would give me access to execute programs. Is that correct? Is there any restrictions that would prevent me from running any programs? For example, if the program is assigned to custom t-code, would I also need access to that t-code to run the program?

I am trying to understand what this access would allow and whether there is any audit risk with having this access. Appreciate any information.

Thanks,

Dave