Joule with SAP Datasphere – Step by Step Setup Guide

Introduction:

We are happy to introduce you to the Joule capabilities with SAP Datasphere.

Joule will support users in SAP Datasphere in interacting in new ways. It provides not only a natural language interface to SAP Datasphere but also allows users to perform tasks across sites instead of navigating through the user interface in multiple clicks.

With Joule, SAP Datasphere will provide use cases along three main usage patterns:

Informational: Users can ask for specific information about their tenant, such as how many spaces are locked at a specific moment or what users have been assigned to a certain role. Joule can also answer product questions by searching through SAP product documentation on behalf of the user and retrieve the answer tailored to the question raised.

Navigational: Joule also allows users to navigate through SAP Datasphere by directly providing buttons in chat instead of clicking on the user interface to navigate to the desired location.

Transactional: extending the navigational usage patterns mentioned above, Joule can also perform transactions based on user queries, such as adding users to a space or creating models.

In the first release, the scenarios span across all three usage patterns. The scope covered is focused on admin target personas, space managers, as well as all users who from time to time use the SAP product documentation.

Going forward, SAP Datasphere will increase the coverage also to data modelling tasks and further capabilities offered today.

Before we get started with the Joule integration with SAP Datasphere, it’s important to understand the overall Joule integration for your organization. Please look at the blogs below:

****************************************************************************

IMPORTANT: SAP has announced our new offering on SAP Managed Joule. We will be starting the new offering soon, however, if you are looking get started today you may continue to setup the Joule services and plan a move to SAP Managed Joule in the near future. 

This blog post is a series for Joule Activation:

SAP Business AI – Overview for all !!! (Includes information on Joule Supported Data Centers, Different scenarios during Joule setup, etc..)Joule – Unified Setup: Bridging Simplicity and Performance (Demo Video to understand the Unified Setup, Joule basics & architecture, how to set up Joule, etc…) Joule for SAP S/4HANA Cloud Private Edition – A Comprehensive Setup GuideJoule Setup – End-to-End Setup Guide (for all Line of Business) Unified ApproachJoule for SAP S/4HANA Cloud Public Edition – Setup GuideSAP Digital Supply ChainJoule for SAP Integrated Business Planning (SAP IBP) – Setup GuideJoule Setup for SAP Integrated Product DevelopmentJoule – Getting Started with Document Grounding – setup guideActivate Joule with SAP Build Work Zone and SAP Mobile StartAnalytics Insights in Joule – Setup GuideJoule in SAP Signavio Process Transformation Suite – Setup Guide Joule in SAP Ariba – Setup GuideJoule with SAP Concur

Joule in SAP Datasphere – You are Here

SAP Digital Supply Chain (WIP)SAP Asset Performance ManagementSAP Digital ManufacturingSAP FieldglassSAP LeanIXand more to be added towards General Availability

****************************************************************************

Pre-Requisites

Before you can activate Joule, you must meet certain prerequisites. This section describes those prerequisites and outlines some details that need to be captured prior to running through the activation steps. 

User Personas Required for Joule activation – Activation of Joule requires configuration in multiple systems. It’s important to have the right stakeholders involved when setting up the configuration. To set up Joule, the following user personas are required: 

You must have the SAP Datasphere application tenant administrator roleYour SAP Datasphere system should be configured with SAP Cloud Identity Services for user authenticationHave the role of DW Joule Consumer or a global role that has the Joule privilege (not a scoped role) to use Joule features (this will show up in your SAP Datasphere once Joule is integrated)SAP Cloud Identity Services access as an administratorSAP Business Technology Platform as an administratorSubaccount Administrator on the Joule subaccountOrg Manager as a Cloud Foundry Org memberSpace Manager as a Cloud Foundry space member of the Joule space

Hint: Always refer to the SAP Help Page, as it is updated regularly. You can find the links here for Integration with SAP Datasphere.

 

Joule Integration Process

It’s important to know your landscape and how you would like to activate Joule. Below is the scenario described. Please read them carefully and choose the scenario for your setup.

 

 

=========================================================================================

Let us have a look at the steps involved for the integration:

1. SAP Datasphere SSO with SAP Cloud Identity Services

In case you do not have this configured, you can follow this video to understand the setup process. The video has been updated with the required details. 

Tip: In case you are not familiar with your SAP Cloud Identity Services, do not create a new one. Ideally your company will have the SAP Cloud Identity Services provisioned for you. Please check with your organization before you create a new tenant. In case you need more details, you also check –  Get Started with SAP BTP – Cloud Identity Service Provider (SAP IdP) look for the Discovery section in the project board and click on where to find your existing IdP Service. 

Note:

When setting SAP Datasphere SSO, we recommend using an existing SAP Cloud Identity Services connected with other LoB applications to achieve a unified setup with Joule. You can find more information here: Joule—Unified Setup: Bridging Simplicity and Performance. Especially considering Business Data Cloud aspects with SAP Analytics Cloud and access to models from Datasphere.If you have a third-party IDP, such as Microsoft Entra / OKTA, you can configure SAP Cloud Identity Services as a proxy, and user authentication can still continue in that IDP. You can find more information here.

2. Integration Joule in SAP Datasphere

Scenario 1: Joule in SAP Datasphere – new setupScenario 2: You have an existing Joule setup, and a formation has been created

3. Post-integration settings

4. Joule test scenarios

=========================================================================================

 

Now that we have a process in place, we are ready to get started:

 

1. SAP Datasphere SSO with SAP Cloud Identity Services

We believe you have completed the steps above to configure the SSO with your SAP Cloud Identity Service before we proceed with the Joule setup. You can either follow the video or the Appendix images below to achieve the setup.

2. Integration Joule in SAP Datasphere

Scenario 1: Joule in SAP Datasphere – new setup

As mentioned above, for the new Joule setup in SAP Datasphere, you can follow the steps below.

You can follow the steps in this blog – Joule Setup – End-to-End Setup Guide (for all Line of Business) Unified Approach.

Only skip the following steps from the blog above:

3. Registering an SAP System – token exchange
3a. SAP S/4HANA Cloud Public Edition – Maintain Extensions on SAP BTP
3b. SAP SuccessFactors – Extension Center
3c. Validate your System Registration in SAP BTP

Follow all the steps apart from the ones listed above and focus on the steps below:

In step 10 (Run the Joule Booster for the Unified Setup) – while you are at the Select Integration and Select Capabilities – please select SAP Datasphere and click continue.

Once you’ve completed the Joule Booster process, you should be able to see the Joule formation in Ready status.

 

This completes the Joule activation; however, we have more on the configuration. Please continue reading and skip Scenario 2 and go to Step 3.

 

Scenario 2: Existing setup.

In this section, we will show you how to activate SAP Datasphere in the context of an existing Joule formation.

Within your SAP BTP Global Account, navigate to System Landscapes, click on Formations, and search for the Joule formation you have already set up. In my case, I am using one of the existing formations, which has multiple SAP products connected to one Joule instance, as shown below. You can click on Include System.

 

In the new window, you may filter it only for SAP Datasphere for Joule integration and click on Next.

 

Select the option “Enable Capability Deployment”, “Enable the Joule Icon in the Integrated System”, and click on Review.

 

Review the details, and if all is good, you may click on Include.

The process may take 5 to 8 minutes to complete, and you should be able to see the synchronizing option, as shown below. 

Once the status turns Green and Ready, we are good with the Joule setup for your SAP Datasphere. Now, we will need to configure your authentication mechanism for the Joule users and also look at the user role mapping.

 

3. Post-integration settings

With both the approaches above for Joule activation, you should be able to see a Destination that is created in your subaccount. Please ensure you validate it.

 

If you have a new activation on Joule on SAP Datasphere, please validate the following step. You will need to modify a few settings to ensure Joule is working.

3.1 Login to your SAP Cloud Identity Services which is part of you Joule, click on Application & Resources -> click on Application -> click on das-ias (your Joule setup) -> click on Attributes.

Under Self-defined Attributes > Add Name as “Groups” -> select Source as “Expression” -> Value as “sac” (case sensitive) and Save the settings.

 

3.2. Do the same for your XSUAA BTP Subaccount, also as mentioned above.

 

3.3 Navigate to Application & Resources -> click on Tenant Settings -> click on Customization -> click on Trusted Domains and click on Add.

Ensure to add the following SAP Datasphere trusted domains to the IAS.

*.cfapps.orca.dev.sap

*.hcs.cloud.sap

*.ondemand.com

*.projectorca.cloud

*.datawarehouse.cloud.sap

*.hanacloudservices.cloud.sap

The setup should be as shown below. 

 Click Save once all the domains have been entered.

3.4 Follow a similar process and add the SAP Datasphere Domains in your SAP BTP Subaccount where Joule is activated.

 

3.5 Please note that your Subject Name Identifier should be Email for both your XSUAA Datasphere Subaccount and your Datasphere application for Joule as below.

 

Check the  Datasphere subaccount -> Subject Name Identifier -> primary attribute it can be email or Global User ID. Both could be supported.  

 

3.6 Roles in SAP Datasphere

Next, assign the required roles in your SAP Datasphere to enable the Joule Icon. In your SAP Datasphere system, navigate to System and click on Configuration -> click on AI Services tab -> enable/activate the Joule Flag as shown below.

 

Now that you have activated the Joule service in your tenant, you will also need to grant users access to the Joule icon. To do so, navigate to Security, click on Roles, click on DW Joule Consumer, and assign the required users.

 

You can also do the same via the Users option and assign the role above.

Important: Joule will not work for the user who is assigned the “System_Owner” role. If you are the system owner, you may be able to see the Icon, but you may not get the responses from Joule that you are looking for. Please ensure that you validate the setup with other users once the configurations are activated.

 

 

 

4. Roles and User Provisioning to SAP Build Work Zone

As part of the next steps we will need to do the following which is very well documented in the SAP Help Portal. Please follow the steps which needs to be completed:

Click on the link – Synchronize Roles and Provision Users to SAP Build Work Zone and follow the steps for:

Provision Users from SAP Datasphere to SAP Build Work Zone Using IPSCreate an OAuth client for the IPS in SAP DatasphereCreate an instance of the SAP Build Work Zone service and a service key in your Joule subaccountSet up the SAP Datasphere tenant as a source system in IPSSet up SAP Build Work Zone as a target system in IPSRun user and group provisioning in IPSValidate ProvisioningSchedule user and group provisioning in IPS

You should be able to see roles for the user with a given e-mail or global user id on SAP Build Work Zone. If the job fails, review the URLs, client ids and secrets.

 

5. Test Joule

We are now ready to set up the test Joule in Datasphere. You should be able to see the Joule Icon in your SAP Datasphere tenant. 

Important : To find more information about the Joule Capabilities, we recommend to you check the SAP Help Page – Joule in SAP Datasphere. 

 

This completes the setup process, and you should be able to use Joule with your Datasphere system.

Special thanks to Marvin Klose (RIG Team),  Mario Kabadiyski, Stefan Schares, and Esther Landes for supporting the Joule journey with SAP Datasphere. 

 

 

​ Introduction:We are happy to introduce you to the Joule capabilities with SAP Datasphere.Joule will support users in SAP Datasphere in interacting in new ways. It provides not only a natural language interface to SAP Datasphere but also allows users to perform tasks across sites instead of navigating through the user interface in multiple clicks.With Joule, SAP Datasphere will provide use cases along three main usage patterns:Informational: Users can ask for specific information about their tenant, such as how many spaces are locked at a specific moment or what users have been assigned to a certain role. Joule can also answer product questions by searching through SAP product documentation on behalf of the user and retrieve the answer tailored to the question raised.Navigational: Joule also allows users to navigate through SAP Datasphere by directly providing buttons in chat instead of clicking on the user interface to navigate to the desired location.Transactional: extending the navigational usage patterns mentioned above, Joule can also perform transactions based on user queries, such as adding users to a space or creating models.In the first release, the scenarios span across all three usage patterns. The scope covered is focused on admin target personas, space managers, as well as all users who from time to time use the SAP product documentation.Going forward, SAP Datasphere will increase the coverage also to data modelling tasks and further capabilities offered today.Before we get started with the Joule integration with SAP Datasphere, it’s important to understand the overall Joule integration for your organization. Please look at the blogs below:****************************************************************************IMPORTANT: SAP has announced our new offering on SAP Managed Joule. We will be starting the new offering soon, however, if you are looking get started today you may continue to setup the Joule services and plan a move to SAP Managed Joule in the near future. This blog post is a series for Joule Activation:SAP Business AI – Overview for all !!! (Includes information on Joule Supported Data Centers, Different scenarios during Joule setup, etc..)Joule – Unified Setup: Bridging Simplicity and Performance (Demo Video to understand the Unified Setup, Joule basics & architecture, how to set up Joule, etc…) Joule for SAP S/4HANA Cloud Private Edition – A Comprehensive Setup GuideJoule Setup – End-to-End Setup Guide (for all Line of Business) Unified ApproachJoule for SAP S/4HANA Cloud Public Edition – Setup GuideSAP Digital Supply ChainJoule for SAP Integrated Business Planning (SAP IBP) – Setup GuideJoule Setup for SAP Integrated Product DevelopmentJoule – Getting Started with Document Grounding – setup guideActivate Joule with SAP Build Work Zone and SAP Mobile StartAnalytics Insights in Joule – Setup GuideJoule in SAP Signavio Process Transformation Suite – Setup Guide Joule in SAP Ariba – Setup GuideJoule with SAP ConcurJoule in SAP Datasphere – You are HereSAP Digital Supply Chain (WIP)SAP Asset Performance ManagementSAP Digital ManufacturingSAP FieldglassSAP LeanIXand more to be added towards General Availability****************************************************************************Pre-Requisites Before you can activate Joule, you must meet certain prerequisites. This section describes those prerequisites and outlines some details that need to be captured prior to running through the activation steps. User Personas Required for Joule activation – Activation of Joule requires configuration in multiple systems. It’s important to have the right stakeholders involved when setting up the configuration. To set up Joule, the following user personas are required: You must have the SAP Datasphere application tenant administrator roleYour SAP Datasphere system should be configured with SAP Cloud Identity Services for user authenticationHave the role of DW Joule Consumer or a global role that has the Joule privilege (not a scoped role) to use Joule features (this will show up in your SAP Datasphere once Joule is integrated)SAP Cloud Identity Services access as an administratorSAP Business Technology Platform as an administratorSubaccount Administrator on the Joule subaccountOrg Manager as a Cloud Foundry Org memberSpace Manager as a Cloud Foundry space member of the Joule spaceHint: Always refer to the SAP Help Page, as it is updated regularly. You can find the links here for Integration with SAP Datasphere. Joule Integration ProcessIt’s important to know your landscape and how you would like to activate Joule. Below is the scenario described. Please read them carefully and choose the scenario for your setup.  =========================================================================================Let us have a look at the steps involved for the integration:1. SAP Datasphere SSO with SAP Cloud Identity ServicesIn case you do not have this configured, you can follow this video to understand the setup process. The video has been updated with the required details. Tip: In case you are not familiar with your SAP Cloud Identity Services, do not create a new one. Ideally your company will have the SAP Cloud Identity Services provisioned for you. Please check with your organization before you create a new tenant. In case you need more details, you also check –  Get Started with SAP BTP – Cloud Identity Service Provider (SAP IdP) look for the Discovery section in the project board and click on where to find your existing IdP Service. Note:When setting SAP Datasphere SSO, we recommend using an existing SAP Cloud Identity Services connected with other LoB applications to achieve a unified setup with Joule. You can find more information here: Joule—Unified Setup: Bridging Simplicity and Performance. Especially considering Business Data Cloud aspects with SAP Analytics Cloud and access to models from Datasphere.If you have a third-party IDP, such as Microsoft Entra / OKTA, you can configure SAP Cloud Identity Services as a proxy, and user authentication can still continue in that IDP. You can find more information here.2. Integration Joule in SAP DatasphereScenario 1: Joule in SAP Datasphere – new setupScenario 2: You have an existing Joule setup, and a formation has been created3. Post-integration settings4. Joule test scenarios========================================================================================= Now that we have a process in place, we are ready to get started: 1. SAP Datasphere SSO with SAP Cloud Identity Services We believe you have completed the steps above to configure the SSO with your SAP Cloud Identity Service before we proceed with the Joule setup. You can either follow the video or the Appendix images below to achieve the setup.2. Integration Joule in SAP DatasphereScenario 1: Joule in SAP Datasphere – new setupAs mentioned above, for the new Joule setup in SAP Datasphere, you can follow the steps below.You can follow the steps in this blog – Joule Setup – End-to-End Setup Guide (for all Line of Business) Unified Approach.Only skip the following steps from the blog above:3. Registering an SAP System – token exchange3a. SAP S/4HANA Cloud Public Edition – Maintain Extensions on SAP BTP3b. SAP SuccessFactors – Extension Center3c. Validate your System Registration in SAP BTP 6.    Activate Cloud Foundry and Create a Space (you can use the existing space if you have one, else you may have to follow this step and create one)9. Activate the SAP Build Work Zone – Subscriptions and Instances (foundation or standard plan)I. Create the Service KeyII. Assign Role CollectionIII. Enable Identity Authentication IV. Validate the System Formation 13. Create NavigationService DestinationFollow all the steps apart from the ones listed above and focus on the steps below:In step 10 (Run the Joule Booster for the Unified Setup) – while you are at the Select Integration and Select Capabilities – please select SAP Datasphere and click continue.Once you’ve completed the Joule Booster process, you should be able to see the Joule formation in Ready status. This completes the Joule activation; however, we have more on the configuration. Please continue reading and skip Scenario 2 and go to Step 3. Scenario 2: Existing setup.In this section, we will show you how to activate SAP Datasphere in the context of an existing Joule formation.Within your SAP BTP Global Account, navigate to System Landscapes, click on Formations, and search for the Joule formation you have already set up. In my case, I am using one of the existing formations, which has multiple SAP products connected to one Joule instance, as shown below. You can click on Include System. In the new window, you may filter it only for SAP Datasphere for Joule integration and click on Next. Select the option “Enable Capability Deployment”, “Enable the Joule Icon in the Integrated System”, and click on Review. Review the details, and if all is good, you may click on Include.The process may take 5 to 8 minutes to complete, and you should be able to see the synchronizing option, as shown below. Once the status turns Green and Ready, we are good with the Joule setup for your SAP Datasphere. Now, we will need to configure your authentication mechanism for the Joule users and also look at the user role mapping. 3. Post-integration settingsWith both the approaches above for Joule activation, you should be able to see a Destination that is created in your subaccount. Please ensure you validate it. If you have a new activation on Joule on SAP Datasphere, please validate the following step. You will need to modify a few settings to ensure Joule is working. 3.1 Login to your SAP Cloud Identity Services which is part of you Joule, click on Application & Resources -> click on Application -> click on das-ias (your Joule setup) -> click on Attributes.Under Self-defined Attributes > Add Name as “Groups” -> select Source as “Expression” -> Value as “sac” (case sensitive) and Save the settings. 3.2. Do the same for your XSUAA BTP Subaccount, also as mentioned above. 3.3 Navigate to Application & Resources -> click on Tenant Settings -> click on Customization -> click on Trusted Domains and click on Add.Ensure to add the following SAP Datasphere trusted domains to the IAS.*.cfapps.orca.dev.sap*.hcs.cloud.sap*.ondemand.com*.projectorca.cloud*.datawarehouse.cloud.sap*.hanacloudservices.cloud.sapThe setup should be as shown below.  Click Save once all the domains have been entered.3.4 Follow a similar process and add the SAP Datasphere Domains in your SAP BTP Subaccount where Joule is activated. 3.5 Please note that your Subject Name Identifier should be Email for both your XSUAA Datasphere Subaccount and your Datasphere application for Joule as below. Check the  Datasphere subaccount -> Subject Name Identifier -> primary attribute it can be email or Global User ID. Both could be supported.   3.6 Roles in SAP DatasphereNext, assign the required roles in your SAP Datasphere to enable the Joule Icon. In your SAP Datasphere system, navigate to System and click on Configuration -> click on AI Services tab -> enable/activate the Joule Flag as shown below. Now that you have activated the Joule service in your tenant, you will also need to grant users access to the Joule icon. To do so, navigate to Security, click on Roles, click on DW Joule Consumer, and assign the required users. You can also do the same via the Users option and assign the role above.Important: Joule will not work for the user who is assigned the “System_Owner” role. If you are the system owner, you may be able to see the Icon, but you may not get the responses from Joule that you are looking for. Please ensure that you validate the setup with other users once the configurations are activated.   4. Roles and User Provisioning to SAP Build Work ZoneAs part of the next steps we will need to do the following which is very well documented in the SAP Help Portal. Please follow the steps which needs to be completed:Click on the link – Synchronize Roles and Provision Users to SAP Build Work Zone and follow the steps for:Provision Users from SAP Datasphere to SAP Build Work Zone Using IPSCreate an OAuth client for the IPS in SAP DatasphereCreate an instance of the SAP Build Work Zone service and a service key in your Joule subaccountSet up the SAP Datasphere tenant as a source system in IPSSet up SAP Build Work Zone as a target system in IPSRun user and group provisioning in IPSValidate ProvisioningSchedule user and group provisioning in IPSYou should be able to see roles for the user with a given e-mail or global user id on SAP Build Work Zone. If the job fails, review the URLs, client ids and secrets. 5. Test JouleWe are now ready to set up the test Joule in Datasphere. You should be able to see the Joule Icon in your SAP Datasphere tenant. Important : To find more information about the Joule Capabilities, we recommend to you check the SAP Help Page – Joule in SAP Datasphere.  This completes the setup process, and you should be able to use Joule with your Datasphere system.Special thanks to Marvin Klose (RIG Team),  Mario Kabadiyski, Stefan Schares, and Esther Landes for supporting the Joule journey with SAP Datasphere.  Happy Learning!!!Regards,Nagesh CaparthySAP Business AI – RIG Team   Read More Technology Blog Posts by SAP articles 

#SAP

#SAPTechnologyblog