There are special, delivered or generated roles or profiles that contain critical authorizations that you must protect.