...
Also when there is a request for a new IS user to be created with the same accesses access like a reference user, the only roles allowed are those indicated above in the exceptions list.
...
For the systems not included in the above roles list (in FF scope), the reference user could be okOK.
Add the roles for the users as per the ticket through IDM and update the managers who have to approve the requests in the ticket.
...