Do you allow role maintenance or access to SU01 and/or PFCG?

With our SAP Access, we provide a HelpDesk where you can request roles to be added to your SAP user. However, we do not allow direct access to SU01 to any users, even in a private client. SU01 and PFCG are two of the very few actions we restrict on our SAP clients.