Hi Benhard,
The standard practice is that for users who maintain data across org units do not get structural authorisations. Please note that structural authorisations uses the AND operator however you can exclude. You scenario is one of those complicated ones but it can be achieved via a function module.
Here are the steps:
Create a function module which returns direct reports for the manager
Create another function module which returns the population he is allowed to manage via CATS
Then create two different structural profiles and exclude accordingly. There is an exclude flag in the OOAW.
If this is not clear get back to me.
Thanks
Dimtri







.jpg)

