Hi,
this issue appears here every month. SAP re-wrote SU01 transaction. SECATT does not work anymore for role assignment, There is an OSS note about this issue from SAP. The solution is to use something else. SU10 could be an option or custom program that uses standard BAPIs to assign roles.
Cheers