Hello,
As my experience and in my opinion authorization group is not enough for SAP table authorizations.
There are alot of Non-classified tables (&NC&) tables including SAP objects and customer objects.
If you give &NC& auth to anyone and SE16 it means that that person can display all non-classified tables.
There must be an authorization with table names.
I also created ZE16 tx with Z_TABU_NAM auth object. So I can give table display authorization using table name.
AFAIK SE16N is restricted anymore and cannot be used for changing tables.
Regards,
Yuksel AKCINAR