How To Fix 60898 - Authorization check: For object '&' unknown error '&'

SAP Error Message - Details

• Message type: E = Error

• Message class: 60 - Real Estate

• Message number: 898

• Message text: Authorization check: For object '&' unknown error '&'

What causes this issue?

An unknown error "&V2&" occurred during the check of the authorization
for the authorization object "&V1&".

System Response

You cannot carry out the required function.

How to fix this error?

Inform your system administrator who should inform SAP.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message 60898 - Authorization check: For object '&' unknown error '&' ?

  The SAP error message 60898, which states "Authorization check: For object '&' unknown error '&'", typically indicates that there is an issue with authorization checks related to a specific object in the SAP system. This error can arise in various contexts, such as when a user attempts to perform an action for which they do not have the necessary permissions.
  Causes:
  
  Missing Authorizations: The user does not have the required authorizations for the specified object.
  Incorrect Role Assignment: The user may not have the correct roles assigned that include the necessary authorizations.
  Profile Issues: The authorization profile assigned to the user may not include the required authorizations.
  Object Configuration: The object in question may not be properly configured in the system.
  Transport Issues: If the object was recently transported from another system, there may be inconsistencies in the authorization data.
  
  Solutions:
  
  
  Check User Authorizations:
  
  Use transaction code SU53 immediately after the error occurs to analyze the authorization check failure. This will show you which authorization object is missing.
  Review the user’s roles and profiles in transaction SU01 or PFCG to ensure they have the necessary authorizations.
  
  
  
  Modify Roles/Profiles:
  
  If the required authorizations are missing, you may need to modify the user’s roles or create a new role that includes the necessary authorizations for the object in question.
  
  
  
  Consult with Security Team:
  
  If you do not have the necessary permissions to change roles or profiles, consult with your SAP security team or administrator to resolve the issue.
  
  
  
  Check Object Configuration:
  
  Ensure that the object is correctly configured in the system. This may involve checking the settings in transaction SU21 for authorization objects.
  
  
  
  Review Transport Requests:
  
  If the issue arose after a transport, check the transport logs and ensure that all necessary authorization data was included in the transport.
  
  
  
  System Logs:
  
  Check the system logs (transaction SM21) for any additional error messages or information that may provide context for the authorization failure.
  
  
  
  Related Information:
  
  
  Authorization Objects: These are used in SAP to control access to various functions and data. Each object has specific fields that define the access level.
  
  
  Transaction Codes:
  
  SU01: User Maintenance
  PFCG: Role Maintenance
  SU53: Display Authorization Check
  SM21: System Log
  SUIM: User Information System (for reporting on authorizations)
  
  
  
  Documentation: Refer to SAP Help documentation for detailed information on authorization concepts and best practices.
  
  
  By following these steps, you should be able to identify the cause of the error and implement a solution to resolve it.