Controlling BP Roles via Authorization Roles Without BAdI – Feasibility?

[PnW]

Hello SAP Community,

We are currently working on implementing authorization roles, based on the content of a business requirement.

In our current setup, we are using a BAdI to control Business Partner (BP) role behavior. However, we are exploring whether it is possible to achieve the same control over BP roles purely through authorization roles, without relying on a BAdI implementation.

Our key question is: Is it feasible to control or restrict access to specific BP roles using only standard authorization objects and role configurations, without using any custom BAdI logic?

If anyone has experience with similar scenarios, or could point us to relevant documentation or best practices, your insights would be greatly appreciated.

Thanks in advance!