Symptom
Asking a question regarding spaces to Joule in SAP Datasphere returns the following answers:
- You don't have permission to see space information
- Oops! I Can't access space information. Please try again later.
Environment
SAP Datasphere
Reproducing the Issue
- Connect to Datasphere tenant
- Click on Joule icon
- Ask a question
Resolution
Checks to perform:
1. Check that the role Data Warehouse Cloud Joule is assigned to the user
2. Check with your IAS administrator whether there is an IPS replication job scheduled between the Datasphere Tenant and the Build Work Zone instance in the Joule subaccount and what is the job run schedule.
Warning: Make sure to use correct source system connection type SAP Analytics Cloud as documented in Synchronize Roles and Provision Users to SAP Build Work Zone documentation.
In SAP Build Work Zone's admin UI -> Settings -> Identity Provisioning, search with your user email and click on 'View Assigned Roles' to check if you see the roles assigned.
3. In the IAS Administrator UI, check the Subject Name Identifier configuration and Attributes settings for both SAP BTP subaccount application and das-ias application => refer to the documentation Integration with SAP Datasphere.
If the Subject Name Identifier is set to another value than email, for example Identity Directory -> Login Name, follow these steps:
- go to the BTP Cockpit and navigate to the very same Joule subaccount (subdomain) which hosts the Joule subscription. Your BTP user should have administration rights on this subaccount to be able to perform the following action.
- open menu Destinations in this subaccount and open the destination named DSP_DWAAS_CORE_SSO in edit mode
- in field User Id Source enter user_name
- save your changes
It may take some time for the changes to take effect. Wait at least for 30 minutes before you retry a new Joule session in Datasphere. If you still experience user permission problems please attach here the IAS troubleshooting log from the Monitoring & Reporting>Troubleshooting Logs menu of the IAS. Before you export the logs, select a time interval that matches your last few Joule prompts about Datasphere, set a filter on the string action="issueJwtToken", then press the Go button to obtain the result.
Keywords
KBA , DS-JOU , Joule in SAP Datasphere , DS-PROV , DWC Provisioning , Problem
SAP Knowledge Base Article - Public