While assigning a Function in BRM, you may experience "Authorization data cannot be updated" error message as in the below screen shot:
This issue happens if the authorization defaults are not updated after an upgrade or an enhancement. Executing the 2a and 2b steps in SU25 in the target (backend) system will resolve the issue:
If you are unsure when to execute SU25, refer this blog post.