SAP Joule - Identity Provisioning - No assigned Roles displayed

[Tobias_Metz]

Dear Community,

Over the past few days, we have set up SAP Joule in our Public Cloud environment. This has worked well. But now we have a problem with the assigned roles in identity provisioning. When I search for a user, I get the message that there are now assigned roles for each user.

The problem now is that Joule doesn't show any results when searching for a specific app or anything else because the rules or permissions are missing. Surely the users in the public cloud have the specific roles assigned.

As additional information, we have an IAS and an IPS tenant in Cloud Identity Services.

Has anyone had the same problem so far?

Thanks for your help in advance.

Greetings Tobias

Joule SAP S/4HANA Cloud Public Edition SAP Cloud Identity Services 

[George_Yu]

Hi @Tobias_Metz ,

I am not familiar with your Site Manager screen. How did you access it? From IAS? 

Because I setup a Joule two weeks ago and didn't go this route. Which guide did you follow?

Regards,

George

[Tobias_Metz]

@George_Yu

Hi George,

we accessed the Site Directory over the BTP:

The Sitemanager is in the build work zone. 

We used the mission in the discovery center for the setup.

Thanks for the help in advance.

Cheers Tobias

[George_Yu]

Hi Tobias, from Subaccount: Instances and Subscriptions, how did you get into Site Manager? Regards, George

[Tobias_Metz]

@George_Yu

Hi George, we have the possibility to click on Joule in Instances section:

Cheers Tobias

[George_Yu]

Hi Tobias,

I don't have that Joule link in my Instances. I am not sure if you are looking at the right direction. Which doc are you following?

Regards,

George

[Tobias_Metz]

Hi @George_Yu,

I was using this mission here: https://discovery-center.cloud.sap/protected/index.html#/missiondetail/4452/4738/. And to clarify Joule is working we only have a problem with the assigned roles in identity provisioning. This is the task in the mission where we have this problem:

Cheers Tobias

[George_Yu]

Hi Tobias,

A little bit of confusing these days. I follow a different documentation: the Joule Onboarding Guide: https://help.sap.com/docs/JOULE/6189c8655c484916bb8eb767126a653a/48e8f655470048c29555272578fbc2ce.ht.... Your Discovery Center documentation is new to me.

I am working on this Joule topic these days. If I get something, I will be back to you. At the moment, I don' t have an answer.

Regards,

George

[George_Yu]

Hi Tobias,

Now I understand which step you are talking about. In my case, I do have 4 user roles provisioned. 

What does the Provision Log said (Previous Card)? If no error, is your Content ID correct? Because content ID is part of the Assigned Role.  Also, do all users don't have the roles, or just you? I assume you have business user roles assigned, even just one.

Regards,

George

[Tobias_Metz]

Hey George,

exactly thats the problem:

I can't see any roles there. I can not even find my (or any other) user there. In the provisioning log there is no error and the ID is also correct. 

Greetings Tobias

[George_Yu]

Hi Tobias,

Here is my provision log. It updated groups along with users. The "group" is the key.

In this case, I'd suggest to open a ticket and let Support colleagues to analyze the issue.

Regards,

George

[Tobias_Metz]

Hi @George_Yu,

we were able to achieve a partial success. In the Identity Provisioning in the section for the source systems there was a filter set in the public cloud environment for Joule:

I deleted this filter. Now I can see several roles in the Identity Provisioning in the Site manager:

Unfortunately, there is still the problem that no roles are transferred to the public cloud environment in the Site Manager - Channel Manager area. So I still can't see any apps in Joule.

Greetings Tobias