Question:

Why is a user profile Security Policy field not editable in Vault?

Answer:

This is the expected behavior. In order to make changes to the Security Field, the user making the changes must be a Domain Administrator. 

Related Documentation:

Vault Domain Documentation: Features at the Domain Level