Service Administrator in FCCS can self assign role - against SOX compliance

Summary:

Customer has raised a flag on auditing security:

• Administrator should not be allowed to change self-access which is against the SOX compliance.
• During Audit - auditor can self assign and add application role which triggered this concern?
• Customer also said that in HFM - system administrator can not self edit role ? why in FCCS?

Do we have any documentation available?

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):