Customers will have IT auditing and it is not acceptable that partner consultants and other support persons will have System admin role in production F&O.

These persons will require usually wide access to many functionality and also to many system admin type of functionalities (batch processes, user roles, business events, office integration issues, data management processes etc).

Auditing will not approve that customer will have all these roles mapped to system admin. There should be the role, which is system admin but restrictions to the specific functions like posting transactions, change bank account information, change master data information within UI (should be able to support data management import process).

Typical users for this kind of role is partner consultants or other parties, which are supporting production use. This role can also divide 2 - more technical System maintenance role (view level to master data/setup data type of views) and new role System consultant role, which will have edit possibility to the parameters, setup, personalizations etc - more consultant type of work.