How To Fix SU2X221 - Security-critical default value for object &1

SU2X221 - Overview

• Message type: E = Error

• Message class: SU2X - Messages for Authorization Default Value Maintenance

• Message number: 221

• Message text: Security-critical default value for object &1

What causes this issue?

The authorization default value for the object contains a critical value
for general system security in at least one field.

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

System Response

This message is a static warning about possible security problems in
your authorization concept.
Check whether the default values for the affected application (with
regard to this object) correspond to the requirements of your security
policy. Pay particular attention to unmaintained field values, full
authorizations (field value *), and values that could, in the context of
this object, lead to extensive generated authorizations in roles.

How to fix this error?

If necessary, correct the values in accordance with the requirements of
your authorization concept.

Procedure for System Administrators

Check the roles that contain the affected application in their menu.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SU2X221 - Security-critical default value for object &1 ?

  The SAP error message SU2X221 indicates that there is a security-critical default value for an object in the system. This typically occurs in the context of authorization management, where certain default values for authorization objects may pose a security risk if they are not properly configured.
  
  Cause:
  The error is triggered when a default value for an authorization object is considered security-critical. This can happen due to:
  
  Default values that grant excessive permissions or access rights.
  Configuration settings that do not align with security best practices.
  Missing or incorrect authorization checks for certain transactions or objects.
  
  
  Solution:
  To resolve the SU2X221 error, you can take the following steps:
  
  
  Review the Authorization Object: Identify the specific authorization object mentioned in the error message (denoted as &1). Check its configuration and the default values assigned.
  
  
  Adjust Default Values: If the default values are too permissive, consider changing them to more restrictive values that align with your organization's security policies.
  
  
  Consult Security Guidelines: