There are special, delivered or generated roles or profiles that contain critical authorizations that you must protect.
The following is a list of special, delivered or generated authorization objects that require protection.
This is not an exhaustive list. Consult the relevant security guides for your applications and products.
SAP_ALL
SAP_NEW