What are the risks related to the PA029 rule related to Create and Maintain Projects vs Create and Maintain AR Invoices/Credit Memos?

Access to both would allow an individual to create/modify fictitious project definitions and create/modify accounts receivables invoice, enter unauthorized credit memos, causing misleading financial statements and fraud.