Dear Sai,
we have similar cases in our enterprise and there is only one approach from my point of view: change the composite roles. Since it is not possible to reject a single role in a composite you have to change the composite assignments.
Just for your information: I am changing composite roles daily to avoid SOD conflicts as users have several composite roles assigned.
As a very good approach we are trying to avoid "critical" single roles in composite roles. For example Sales Order Entry, Customer Masterdata Maintenance, Payment Execution, etc. isn't assigned in a composite role. This "critical" single roles are assigned to users.
Basically I say a composite role should cover 80% of all required roles for a function. Critical assignments should be given based on the end user.
Hope this helps.
Regards,
Alessandro