How To Fix 26457 - Inherited authorizations cannot be deleted

SAP Error Message - Details

• Message type: E = Error

• Message class: 26 - Dokumentenverwaltung

• Message number: 457

• Message text: Inherited authorizations cannot be deleted

Self-Explanatory Message

Since SAP believes that this specific error message is 'self-explanatory,' no more information has been given.The majority of messages in the SAP system have a message text, however this is frequently insufficient to comprehend or resolve the problem.

To make things easier, more detailed information is frequently added to describe the issue, how to fix it, and the necessary steps or configuration modifications.

Unfortunately, there isn't any extra information in this error notice.

What else can you do?

First, use our AnswerBot below to get a possible cause and solution (requires a premium subscription).

Also, review the in-depth Common Questions & Answers listed below; you could discover a solution there or be able to connect with others who have faced similar challenges.

You can also try searching the SAP support portal (support.sap.com) but you need a special user ID to access it. It is possible that an SAP support note exists that provides additional details about the mistake or even steps for fixing it.

Smart SAP Assistant

• What is the cause and solution for SAP error message 26457 - Inherited authorizations cannot be deleted ?

  The SAP error message 26457, which states "Inherited authorizations cannot be deleted," typically occurs in the context of user authorization management within the SAP system. This error is related to the way authorizations are structured and inherited in SAP.
  Cause:
  
  Inherited Authorizations: The error indicates that the system is trying to delete authorizations that are inherited from a role or profile. In SAP, roles can inherit authorizations from other roles, and the system prevents the deletion of these inherited authorizations to maintain the integrity of the authorization structure.
  Role Management: If you are attempting to modify a role that has inherited authorizations from another role, the system will not allow you to delete those inherited authorizations directly.
  
  Solution:
  
  Review Role Inheritance: Check the role from which the authorizations are inherited. You may need to modify the parent role instead of the child role.
  Adjust Authorizations: If you need to change the authorizations, consider adjusting the parent role or creating a new role that does not inherit the unwanted authorizations.
  Use Transaction PFCG: Go to transaction PFCG (Profile Generator) to manage roles and authorizations. Here, you can see the structure of roles and how they inherit authorizations.
  Remove Inheritance: If necessary, you can remove the role's inheritance from the parent role, but be cautious as this may affect other users or roles that rely on that inheritance.
  Consult Documentation: Refer to SAP documentation or consult with your SAP security team for best practices on managing roles and authorizations.
  
  Related Information:
  
  Role Management: Understanding how roles and authorizations work in SAP is crucial. Familiarize yourself with concepts like composite roles, single roles, and authorization objects.
  Authorization Objects: Learn about the specific authorization objects that are relevant to the roles you are managing.
  SAP Notes: Check SAP Notes for any specific patches or updates related to authorization management that might address known issues or provide additional guidance.
  Testing Changes: Always test changes in a development or quality assurance environment before applying them to production to avoid unintended access issues.
  
  If you continue to face challenges, consider reaching out to your SAP Basis or Security team for further assistance.