SAP Joule - Identity Provisioning - No assigned Roles displayed

[Tobias_Metz]

Dear Community,

Over the past few days, we have set up SAP Joule in our Public Cloud environment. This has worked well. But now we have a problem with the assigned roles in identity provisioning. When I search for a user, I get the message that there are now assigned roles for each user.

The problem now is that Joule doesn't show any results when searching for a specific app or anything else because the rules or permissions are missing. Surely the users in the public cloud have the specific roles assigned.

As additional information, we have an IAS and an IPS tenant in Cloud Identity Services.

Has anyone had the same problem so far?

Thanks for your help in advance.

Greetings Tobias

Joule SAP S/4HANA Cloud Public Edition SAP Cloud Identity Services 

[George_Yu1]

Hi @Tobias_Metz ,

I am not familiar with your Site Manager screen. How did you access it? From IAS? 

Because I setup a Joule two weeks ago and didn't go this route. Which guide did you follow?

Regards,

George

[Tobias_Metz]

@George_Yu1

Hi George,

we accessed the Site Directory over the BTP:

The Sitemanager is in the build work zone. 

We used the mission in the discovery center for the setup.

Thanks for the help in advance.

Cheers Tobias

[George_Yu1]

Hi Tobias, from Subaccount: Instances and Subscriptions, how did you get into Site Manager? Regards, George

[Tobias_Metz]

@George_Yu1

Hi George, we have the possibility to click on Joule in Instances section:

Cheers Tobias

[George_Yu1]

Hi Tobias,

I don't have that Joule link in my Instances. I am not sure if you are looking at the right direction. Which doc are you following?

Regards,

George

[Tobias_Metz]

Hi @George_Yu1,

I was using this mission here: https://discovery-center.cloud.sap/protected/index.html#/missiondetail/4452/4738/. And to clarify Joule is working we only have a problem with the assigned roles in identity provisioning. This is the task in the mission where we have this problem:

Cheers Tobias

[George_Yu1]

Hi Tobias,

A little bit of confusing these days. I follow a different documentation: the Joule Onboarding Guide: https://help.sap.com/docs/JOULE/6189c8655c484916bb8eb767126a653a/48e8f655470048c29555272578fbc2ce.ht.... Your Discovery Center documentation is new to me.

I am working on this Joule topic these days. If I get something, I will be back to you. At the moment, I don' t have an answer.

Regards,

George

[George_Yu1]

Hi Tobias,

Now I understand which step you are talking about. In my case, I do have 4 user roles provisioned. 

What does the Provision Log said (Previous Card)? If no error, is your Content ID correct? Because content ID is part of the Assigned Role.  Also, do all users don't have the roles, or just you? I assume you have business user roles assigned, even just one.

Regards,

George

[Tobias_Metz]

Hey George,

exactly thats the problem:

I can't see any roles there. I can not even find my (or any other) user there. In the provisioning log there is no error and the ID is also correct. 

Greetings Tobias

[George_Yu1]

Hi Tobias,

Here is my provision log. It updated groups along with users. The "group" is the key.

In this case, I'd suggest to open a ticket and let Support colleagues to analyze the issue.

Regards,

George

[Tobias_Metz]

Hi @George_Yu1,

we were able to achieve a partial success. In the Identity Provisioning in the section for the source systems there was a filter set in the public cloud environment for Joule:

I deleted this filter. Now I can see several roles in the Identity Provisioning in the Site manager:

Unfortunately, there is still the problem that no roles are transferred to the public cloud environment in the Site Manager - Channel Manager area. So I still can't see any apps in Joule.

Greetings Tobias

[Chuma · Accepted solution]

Hello @Tobias_Metz 

Hi Tobias,

You're seeing roles provisioned, but no apps/pages appear in SAP Build Work Zone (Joule), and Site Manager, Channel Manager shows 0/0 created. This happens because the catalogues and pages in S/4HANA Cloud are not exposed to FLP.

Possible technical options

1. In S/4HANA Cloud, open the Manage Launchpad Content app.

2. For each catalogue, space, or page used in the roles, enable:

 “Expose to SAP Build Work Zone” (sets FLP: Expose = true)

Re-run the Identity Provisioning job from S/4HANA - BTP.

3. In Work Zone Site Manager, go to Content Explorer — you should now see roles, catalogues, and pages properly synced.

4. Roles alone are not enough. Only content with FLP: Expose = true will sync to the Build Work Zone.

 Check below SAP Documentations

 SAP Help – Expose Launchpad Content to SAP Build Work Zone

Expose Federation Content from SAP S/4HANA-SAP Learning

Exposing Content from SAP S/4HANA-SAP Learning

With regards

Chuma

[George_Yu1 · Accepted solution]

Hi @Chuma ,

Thanks for reactivating this Q&A thread. 

Hi @Tobias_Metz ,

I have learned and practiced more on Joule Setup in the Public Cloud. The User/Group Provisioning consists several steps after running Joule Booster. I have a good discussion on this topic in one of my blogs 

My AI Experience Sharing – Setting up Joule for the S/4HANA Public Edition (Part B: Joule Installati.... Please refer to Steps B.5 to B.9 with a good explanation on the subject.

Regards,

George

[Tobias_Metz · Accepted solution]

Thanks to you both @George_Yu1 and @Chuma!