In PFCG, I have created asingle role to manage the service orders by plant. In the transaction IW32, I would like to restrict the sales document assignment by sales area. Which authorization object can do it? Can I define my single role without user exit?