How To Fix RSEC070 - Not all authorizations for object &1 could be deleted

SAP Error Message - Details

• Message type: E = Error

• Message class: RSEC -

• Message number: 070

• Message text: Not all authorizations for object &1 could be deleted

What causes this issue?

There are authorizations for the authorization object &v1& that were not
created with transaction RSSM. These cannot be deleted automatically
.
Authorizations created with transaction RSSM have been deleted.

System Response

You can only delete the authorization object &v1& once you also deleted
the other authorizations manually.

How to fix this error?

First delete existing roles (and profiles) for authorization object &v1&
.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message RSEC070 - Not all authorizations for object &1 could be deleted ?

  The SAP error message RSEC070 indicates that there was an issue when trying to delete authorizations for a specific authorization object. This error typically arises in the context of SAP's authorization management, particularly when dealing with roles and profiles in the system.
  Cause:
  The error message RSEC070 can occur due to several reasons:
  
  Existing Authorizations: There may be existing authorizations that are still assigned to users or roles, preventing the deletion of the authorization object.
  Role Dependencies: The authorization object might be linked to roles that are still active or assigned to users.
  Transport Requests: If the authorization object is part of a transport request that has not been released or is still in use, it may cause this error.
  Database Locks: There could be database locks or inconsistencies that prevent the deletion of the authorization object.
  Missing Authorizations: The user attempting to delete the authorization may not have the necessary permissions to perform this action.
  
  Solution:
  To resolve the RSEC070 error, you can follow these steps:
  
  
  Check Authorizations: Verify if the authorization object is still assigned to any roles or users. You can use transaction codes like PFCG (Role Maintenance) to check role assignments.
  
  
  Remove Assignments: If the authorization object is assigned to any roles, you will need to remove it from those roles before attempting to delete it again.
  
  
  Check Transport Requests: Ensure that there are no pending transport requests that include the authorization object. If there are, you may need to release or adjust those requests.
  
  
  Database Consistency: Check for any database locks or inconsistencies. You may need to consult with your SAP Basis team to resolve any underlying database issues.
  
  
  User Permissions: Ensure that the user attempting to delete the authorization has the necessary permissions to do so. You may need to log in with a user that has higher privileges or request the necessary authorizations.
  
  
  Use Transaction SUIM: You can use transaction SUIM (User Information System) to analyze user assignments and find out where the authorization object is being used.
  
  
  Related Information:
  
  Transaction Codes: Familiarize yourself with relevant transaction codes such as PFCG (Role Maintenance), SU01 (User Maintenance), and SUIM (User Information System) for managing authorizations.
  Authorization Concept: Understanding the SAP authorization concept, including roles, profiles, and authorization objects, can help in troubleshooting similar issues.
  SAP Notes: Check SAP Notes for any specific patches or updates related to the RSEC070 error, as there may be known issues or fixes provided by SAP.
  
  If the problem persists after following these steps, it may be beneficial to consult with your SAP Basis or Security team for further assistance.