Derive Role Creation through SECATTExtended Computed Aided Testing ToolPrepared By: Satyajit DattaRequirement:Make sure the client setting is changed to allow ecatt. Follow the instruction below Execute transaction SCC4 SAP R/3 Menu : Tools -> Administration -> Administration -> Client Administration -> Client Maintenance Then carry out the following steps: 1. Choose Display 2. Confirm the warning message Caution: The table is cross client. 3. Select your SAP R/3 client and choose Details. 4. In the Change View Clients: Details screen, activate the following settings: eCATT and CATT allowed. 5. Save. 6. Go back to the SAP Easy Access menu

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Go to Tcode - SECATT On the eCATT (tcode -SECATT) initial screen, select the Test Script radio button and enter a name for your new test script in the field beside it. Here, we will name it ZDERIVE_ROLE and then click on CREATE Button.

We need to put below information as per our requirement Title: Create Derive Roles Personal Responsible : Component : BC-SEC

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Then Click on Pattern and put below information

This will start recording and take you to the Role create screen and continue the derived role creation. In our example a role: ZCREATEROLE1 is created from already existed master role. Save the role and hit the back button. This will end the recording and you will be asked to save the recording. Click Yes.

Save it as local object

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Then go back and switch to change mode

Select the PFCG_1 and double click the same. Go to DYNPRO as shown in bottom half, highlight it and click on simulator button marked in red circle.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

This will switch to simulation mode and we have to parameterize the steps we ran in PATTERN. We parameterized. Role name (derived), description, and master roles And child roles and The Screen will be like this. Double click on Role field (###) and it will open a pop up for Maintain field entry Put Parameter name as per your choice as shown ZDERIVE and hit enter or click on Green tick. Then click on next screen button as shown in red square box and continue the same process to parameterize other fields want to maintain.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Then we need click Change Authorization Data if we want to maintain org level values and parameterize same as before. But this tool is not that good to maintain Org level values, it is better to create derive roles first then update org value by manually or some Z-program.

Once it is done it will bring the start point of simulator screen. Save this and come out.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Go to SECATT again. Then create a test configuration with this script as shown below

Put following information as before

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Assign test script we have created earlier with this test configuration. If you need to run it in other target system then put the logical name of the target system as mention below but make sure that there is a trusted RFC between the systems.

Then download the variant as shown below.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

It would be text file and you need to open it as excel. Maintain all values we parameterize earlier. Those which should be default values will be in ECATTDEFAULT row. Then save this file as .txt form and note down the saved location path.

Now save this test configuration as local object. Then go into change mode and execute it. Then you can put your selection as per your requirement as shown below.

Only make sure that the text file name and location path should be correct in variants tab.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

In UI control you can select this to run in Foreground or Background as per your choice. It is better to process in background (option N).

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Execute and check the log if anything failing in background.

To check log you can open a new session and go to SECATT and then

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta

And if you execute this with your id you can see the current logging.

Derive Role Creation through SECATT 12-July-2010

By: Satyajit Datta