Not possible to restrict BI content installation?

Question

In my attempts to restrict RSA1 to display access, I have created an empty role and provided only 2 transaction codes:  RSA1 and SU53 (for analysis).  Having given this bare minimum, practically everything is "restricted" or display-access only in RSA1 except BI Content.
When I click "BI Content", and choose an InfoPackage under "Object Types", I am able to install this InfoPackage.  Is there anyway to restrict the installation of BI Content at all?  Keeping in mind my role has only provides access to RSA1 and SU53, it should NOT allow me to install any content.
Any suggestions are greatly welcome!  As an aside, I did not even add S_RS_ADMWB and still, I can execute RSA1 and run okay.

Answer 1

I did try to add S_RS_ADMWB and in that authorization object, there are 2 fields:
ACTVT = '03' (Display)
RSADMWBOBJ = ....
APPLCOMP     Application Component
BIA_ZA             BI Accelerator Monitor Checks and Actions
BR_SETTING     Broadcasting Settings
CNG_RUN     Attribute Change Run
CONT_ACT     Activation of BI Content
CONT_ADMIN     Administration (Customer) Content System
DOC_ADMIN     Administration of Document Store
DOC_HIER     Hierarchy Documents
DOC_MAST     Master Data Documents
DOC_META     Meta Data Documents
DOC_TRAN     Transaction Data Documents
IMG_BI     Changes to IMG (for BI)
INFOAREA     InfoArea
INFOOBJECT     InfoObject
INFOPACKAG     InfoPackage
METADATA     Metadata
MONITOR     Monitor
NAMESPACE     BI Namespaces
OLAP_CACHE     OLAP Cache Objects
RA_PACKAGE     Reporting Agent packet
RA_SETTING     Reporting Agent setting
REMOD_RULE     Remodeling Rule
SETTINGS     Settings
SOURCESYS     Source System
USE_DND     Drag&Drop to InfoAreas and Application Components
WORKBENCH     Workbench
To me, the objects that seem to require restriction under BI Content would be:  CONT_ACT and CONT_ADMIN.  Including these objects and setting the ACTVT to '03' still yields the same result.  Even when I set ACTVT to '03' and include '*' for all objects - still the same, I am able to install and activate BI Content (InfoPackages).