I'm not asking a question... I'm sending a comment! I hope you accept this?
Your idea of just inserting a Transaction into the Profile's S-Tcode is great and we have been using it, actually frequently. However, there is a hidden problem occurring. I'll explain in point form: Edit single role. Edit Profile and enter the transaction, just like you said. If the single role is part of a few composite roles and you do NOT re-read each composite role...in SUIM you don't get displayed all roles with the profile's transaction - this brings unreal results. At the moment I'm writing a program to access all composite roles through the profile instead of single roles.
Try it! Just create a couple of composite roles using the one single role. Then go to the single roles' Profile and add a new TC, generate. Go to SUIM and inquire on the S-Tcode and in input values request your entered tc.
You are absolutely right. But, to be honest... This is nothing new, SUIM has been inconsistent since 3.1G. I wouldn't bother with the program; I would put an OSS note into SAP. They generally are pretty good about fixing these types of glitches. Good to hear from you again.
This was first published in March 2002