IBM AIX RBAC Enhancement

There are application installation procedure that requires the creation of "/etc/rc.d" entries to automate the application startup and shutdown.
e.g. http://docs.oracle.com/cd/B28359_01/server.111/b32009/strt_stp.htm
# ln -s /etc/dbora /etc/rc.d/rc2.d/S99dbora
# ln -s /etc/dbora /etc/rc.d/rc2.d/K01dbora

In IBM AIX RBAC environment, it is not possible to create/modify/delete a file or a symbolic link within these /etc/rc.d directories, using a RBAC non-root UserID. Even if the RBAC non-root UserID was assigned with these RBAC roles in AIX 7.1; auditadm, fsadm, isso, pkgadm, sa, secadm, so, svcadm, sysop, and useradm.

/etc/rc.d/init.d
/etc/rc.d/rc0.d
/etc/rc.d/rc2.d
/etc/rc.d/rc3.d
/etc/rc.d/rc4.d
/etc/rc.d/rc5.d
/etc/rc.d/rc6.d
/etc/rc.d/rc7.d
/etc/rc.d/rc8.d
/etc/rc.d/rc9.d

In PMR 73011,000,834 IBM AIX Development Support Specialist advised us that, the non-root RBAC UserID will need to have "PV_ROOT" privilege assigned to it, before the UserID is able to perform the above mention activities. Even though a solution works, unfortunately it also gives the RBAC non-root UserID the privileges to edit system related files e.g. /etc/security/passwd files which is undesirable.

IBM development team will need to develop an alternate solution to the above use case without compromising the design of RBAC.