Creation of role

Hi All,

We have requirement .Can anybody tell how can this be done.

we have a parent Parent RoleP1from which derived  role D1is created

Now we need another role D2which should be exactly likeD1but devoid of some tcode execution rights

How can this be done? We created a copy of D1 and created D2 but was not able to remove the unwanted tcode editing the role.

Regards

Mandan