We have setup PO authorisations based on project roles. The setup is working correctly until we connect a sub project to the project role assignment.
We are interested in narrowing down our PO authorisations down to sub project - activity levels, however it does not work when we connect a sub project id to the role assignment. The auth step is fetched to the auth line, however, does not show the potential authoriser when there is a sub project id is connected.

Are we missing anything in the setup?