Introduction
This guide walks SAP customers and IT administrators through the complete end-to-end provisioning of SAP Managed Joule — covering Core Components, Joule/Joule Work, Joule Studio, and Joule Work Desktop — all through SAP for Me. No direct SAP BTP access is required for the first three components.
The screenshots in this blog were captured during hands-on provisioning sessions as part of the SAP Early Adopter Care (EAC) program. All customer-identifiable data has been anonymized.
SAP Managed Joule is the recommended deployment model for customers who want SAP to fully host and operate the Joule infrastructure, including all BTP formations, service instances, and integrations — reducing operational overhead and accelerating time-to-value.
Table for Content
- What is SAP Managed Joule
- Prerequisites and Pre-Checks
- Activation and Provisioning
- Quick Reference Links
What is SAP Managed Joule?
SAP Joule is SAP’s generative AI copilot embedded across the SAP product portfolio. In the SAP Managed deployment model, SAP fully hosts and operates the Joule infrastructure on SAP BTP — customers activate everything through SAP for Me.
The SAP Managed Joule package contains four components that must be provisioned in this order:
1. Core Components – Foundation services for SAP Business AI Platform
2. Joule – Joule AI interface + Joule Work + LoB integrations (S/4HANA, SuccessFactors, Ariba, LeanIX, etc.)
3. Joule Studio – Custom AI Agent development environment
4. Joule Work Desktop – Native desktop app (requires AI units 8019164)
Prerequisites & Pre-Checks:
Verify all pre-conditions before starting provisioning to avoid common failures.
• Valid 0$ SKU or EAC License: Customer must have an active SAP EAC or Premium AI SKU visible under Finance & Legal in SAP for Me.
• S-User must match CRM ID: The provisioning S-User must belong to the same CRM ID under which the 0$ SKU was signed.
• S-User Authorizations: Must have Display Cloud Data and Edit Cloud Data authorizations in SAP for Me.
• SAP Cloud Identity Services Tenant: An active CIS tenant must be available. Each Joule instance maps 1:1 to one CIS tenant.
• BTP Consumption-based Account: Required for Joule Studio. The S-User must be Admin on a BTPEA / CPEA / PAYG BTP Global Account.
• Cloud Administrator privilege: Required in SAP for Me to manage applications and configure LoB integrations.
1. Verify the 0$ SKU / EAC License
a. Navigate to Finance & Legal → Cloud → Contracts
In SAP for Me, select Finance & Legal from the left panel. Click the Cloud tab. Under Contracts, search for eac or your Joule-related contract name.
Image1
b. Open the contract and click the Provisioning tab
Click the contract row to open Contract Details. Click the Provisioning tab to see all included products (Joule, Joule Studio, Autonomous Finance, HCM, Spend Management, SAP Cloud Identity Services, etc.).
Note: If the Provisioning tab is empty or products are missing, verify the S-User’s CRM ID and cloud data authorizations.
Image 2
2. Verify the Joule Product Package
a. Navigate to Portfolio & Products → My Product Packages
In SAP for Me, select Portfolio & Products → My Product Packages. Verify that Core Components and Joule package tiles are visible.
Image 3
b. Click the Joule tile and verify Applications
Click the Joule package tile. Navigate to the Applications tab. Verify that Joule, Joule Studio (and Joule Work Desktop if purchased) tiles are visible.
If applications are not visible: Verify S-User authorizations — the user must have Display Cloud Data and Edit Cloud Data access as described in section 3 below
Image 4
3. Verify S-User Authorizations
a. Navigate to Users & Contacts → Manage Users and Authorizations
In SAP for Me, select Users & Contacts → Manage Users and Authorizations.
Image 5
b. Select the provisioning S-User from the user list
Find and click the S-User who will perform provisioning.
Important: The S-User must belong to the same CRM ID under which the 0$ SKU was signed. A mismatch causes provisioning failures.
c. Go to Available Authorizations tab
Confirm that Display Cloud Data and Edit Cloud Data are both present with required access. Both are required for provisioning.
Image 6
Provision Joule
1. Provision Core Components
Core Components is the mandatory foundation layer. It provisions the shared BTP services, identity integrations, and formations that all other Joule components depend on. This must always be provisioned first.
⏱Time: Core Components provisioning typically takes 10–15 minutes to complete.
Portfolio & Products › My Product Packages › Services
1. Navigate to Portfolio & Products → My Product Packages → Services
In My Product Packages, click the Services category in the left catalog panel to filter to the Core Components tile.
Image 7
2. Click Core Components → Applications tab → Start Provisioning
Click the Core Components tile. Go to the Applications tab. Click Start Provisioning to open the wizard.
Image 8
3. General Information: Enter details and create a Resource Group
Fill in the required fields:
• Name: Enter a descriptive display name (e.g., Core Components Production)
• Path: Click Select or create a resource group → Create resource group → enter a name (e.g., Core Component EAC) → Create
• Business Type: Select Production or Non-Production
Image 9
4. Click Next Step — Step 2: Set Up Systems — Select your CIS Tenant
Under Integration with SAP Cloud Identity Services, select your CIS tenant from the dropdown.
Note: Each Joule instance is mapped 1:1 to one CIS tenant. Multi-select support is planned for a future release. Choose carefully — this CIS tenant applies to all Joule components in this resource group.
Image 10
5. Click Next Step — Configure Parameters — Select Region
Select the deployment Region: Currently US (United States) or EU (European Union).
Image 11
6. Click Next Step — Set Up Formations
Optionally edit the auto-generated Formation Name.
Image 12
7. Click Review → Finish
Review your configuration. Click Finish to start provisioning. Allow 10–15 minutes for completion.
Image 13
8. Click View in Resources
Image 14
Image 15
2. Provision Joule / Joule Work
2.1 Provision Joule Work in SAP for ME
After Core Components is confirmed complete, provision Joule. This sets up the Joule AI interface, Joule Work web application, and optionally configures integrations with SAP LoB systems.
Portfolio & Products › My Product Packages › Artificial Intelligence › Joule
1. Navigate to Portfolio & Products → Joule → Applications tab
Go to My Product Packages → Artificial Intelligence → Joule package. Click the Applications tab.
2. Click Start Provisioning on the Joule tile
Click Start Provisioning on the Joule tile (not Joule Studio).
Image 16
3. General Information
Fill in the fields:
• Name: Enter a descriptive name (e.g., Joule EAC)
• Path: Click Select or create a resource group → Create resource group → enter a name (e.g., Joule EAC) → Create
• Business Type: Production or Non-Production
Tip: Create one resource group (e.g., ‘Joule EAC’) and reuse it for all Joule provisioning steps. This keeps Joule, Joule Studio, Joule work Desktop resources under one organized folder.
Image 17
4. Click Next Step – Set Up Systems (CIS + LoB Systems)
Select your CIS tenant. Optionally configure Line-of-Business system integrations:
• Supported: S/4HANA Public Cloud, SuccessFactors, Ariba Sourcing, LeanIX, and others
• Selecting a system automatically configures all required communication and integration settings
• Requires Cloud Administrator privileges in SAP for Me
Note: Currently single-select per LoB system type. Multi-select support is planned before General Availability (GA).
Image 18
5. Click Next → Configure Parameters → Set Up Formations → Review → Finish
Review configuration and click Finish. Once provisioning completes, assign users in CIS (2.2).
Result: This step provisions the Joule AI interface and Joule Work web application. The CIS joule_end_user group is created automatically.
Image 19
2.2 Assign Users for Joule Work in SAP Cloud Identity Services
After Joule provisioning, assign users to the joule_end_user group in SAP Cloud Identity Services (CIS) to grant them access to the Joule Work web application.
1. Open your SAP Cloud Identity Services (CIS) Administration Console
Navigate to your CIS admin URL: https://<tenant-id>.accounts.ondemand.com
This URL is visible in SAP for Me under the Core Components provisioning resources.
2. Navigate to Users & Authorizations → Groups tile
Click Users & Authorizations in the top navigation bar. Click the Groups tile.
Image 20
3. Search for ‘joule’ in the Groups search field
Enter joule in the search box. The following groups are created automatically during Joule provisioning:
• joule_end_user — For regular Joule Work end users
• joule_tenant_admin — For Joule tenant administrators
• joule_analytics_admin — For analytics administrators
Image 21
4. Click on joule_end_user
Click the joule_end_user row to open group details.
5. Click + Add to assign users
In the User Members section, click + Add. Search by SCIM ID, Login Name, or Email. Select and confirm.
Result: Assigned users will access Joule Work at <base-url>/new
Image 22
2.3 Verify Joule Work
Find the Joule Work URL and confirm end-user access.
Portfolio & Products › Joule › Resources
1. Navigate to Joule package → Resources tab
In SAP for Me, go to the Joule package page. Click the Resources tab.
Image 23
2. Identify the Joule Work URL and access paths
The base URL from the Resources tab supports three paths:
• <base-url> → SAP Cloud Identity Services admin console
• <base-url>/new → Joule Work web application (share with end users)
• <base-url>/admin → Joule Work Admin Center (for administrators)
Image 24
3. Provision Joule Studio
3.1 Provision Joule Studio in SAP for Me
Joule Studio is SAP’s AI-first development environment for building custom AI Agents, apps, and extensions on Joule. It is provisioned from the same Joule Applications tab.
⚠ Pre-requisite for Joule Studio: A consumption-based license agreement must be active on an SAP BTP Global Account (BTPEA / CPEA / PAYG). The provisioning S-User must be Admin on that BTP Global Account.
Fix if provisioning fails: Add the provisioning S-User as Admin on a BTPEA/CPEA/PAYG BTP Global Account. This resolves the ‘consumption-based license agreement not enabled’ error.
Portfolio & Products › My Product Packages › Artificial Intelligence › Joule › Applications
1. Navigate to Joule → Applications tab → Start Provisioning on Joule Studio tile
Go to the Joule package Applications tab. Click Start Provisioning on the Joule Studio tile.
Image 25
2. General Information
Fill in the fields:
• Name: Enter a name (e.g., Joule Studio EAC)
• Path: Select the same resource group used for Joule
• Business Type: Production or Non-Production
Tip: Reusing the same resource group for all Joule provisioning keeps all related resources organized in one folder with a clear hierarchy.
Image 26
3. Click Next — Step 2: Select Applications
Verify Joule Studio is selected. Click Next.
4. Click Next — Step 3: Set Up Systems
Select the Joule Core System — this is the Joule instance provisioned in Step 2. It links Joule Studio to your Joule environment.
Image 27
5. Click Next → Configure Parameters → Review → Finish
Review configuration and click Finish. After provisioning, assign developer roles in CIS.
Result: Joule Studio is provisioned and linked to the Joule environment. Users assigned the JouleStudioDeveloper role in CIS will see a Develop icon in Joule Work.
Image 28
3.2 Assign Users for Joule Studio in CIS
After Joule Studio provisioning, assign users to the JouleStudio authorization groups in CIS. Users with the Developer role will see the Develop section in Joule Work.
1. Open CIS and navigate to Users & Authorizations → Groups
In CIS, click Users & Authorizations → Groups tile.
2. Search for ‘joule’ in the Groups search field
After Joule Studio provisioning, two new groups appear:
• jouleStudio – JouleStudioAdministrator — Admin access to Joule Studio
• jouleStudio – JouleStudioDeveloper — Developer access (enables Develop icon in Joule Work)
Image 29
3. Click on jouleStudio – JouleStudioDeveloper
Click the jouleStudio – JouleStudioDeveloper row to open group details.
Image 30
4. Click + Add to assign developer users
In User Members, click + Add. Search and select users who need Joule Studio developer access. Confirm.
Result: Assigned users will see the Develop icon/section in Joule Work, enabling them to create and manage custom AI Agents.
5. Repeat for JouleStudioAdministrator for required users
For users who need admin privileges over Joule Studio, also add them to jouleStudio – JouleStudioAdministrator.
3.3 Verify Joule Studio
1. Log in to Joule Work
Navigate to <base-url>/new using an account assigned to the JouleStudioDeveloper group.
2. Verify the Develop icon appears
In the Joule Work interface, confirm the Develop section/icon is visible.
If Develop is not visible: Verify the user is assigned to jouleStudio – JouleStudioDeveloper in CIS. Wait a few minutes for the assignment to take effect.
Image 31
4. Provision Joule Work Desktop
4.1 provision Joule Work Desktop in SAP for ME
Joule Work Desktop (JWD) is a native desktop application for Joule Work with local file access, MCP server configuration, and desktop-native integrations.
⚠ AI Units Required: Joule Work Desktop provisioning requires AI units (material 8019164). Verify AI units are available before provisioning.
1. Navigate to Joule Applications tab. Click Start Provisioning on Joule Work Desktop
In the Joule package Applications tab, locate the Joule Work Desktop tile (visible only if purchased).
Image 32
2. Click Start Provisioning on Joule Work Desktop
Follow the wizard: General Information → Set Up Systems → Configure Parameters → Review → Finish.
Image 33
3. Install and configure the Joule Work Desktop client
After provisioning, connection details for your Joule Work desktop services will be displayed; you may copy the URL and open it a browser
Image 34
4. You will be able to see the options for Joule Work desktop for Client Setup and Tenant Administrator
Image 35
5. You can click on Client Setup, you should be able to see the details of your SAP Cloud Identity Services (IAS) URL, Zone UUID, Client ID (auto generated) and the Gateway URL which is required to connect to the Joule Work desktop.
Image 36
The URL will also contain Tenant ID, identifiable towards the end of URL a series of number, please make a note of it as it will be required for verification.
4.2 Assign Users for Joule Work Desktop
There are two user groups:
– AdminJouleDesktop: Administrator role for configuring and managing the application for the organization
– UseJouleDesktop: Standard user role for accessing and using the Joule Work desktop application
Add user to the required roles
Image : 37
Official SAP Help Portal Reference Links
SAP Managed Joule — Provisioning: https://help.sap.com/docs/joule/joule-work/sap-managed-provisioning
Provision Joule Studio https://help.sap.com/docs/joule-studio/joule-studio/provision-joule-studio
Joule Studio — Documentation Hub https://help.sap.com/docs/joule-studio
Joule Work Desktop https://help.sap.com/docs/joule/joule-work/joule-work-desktop
SAP Cloud Identity Services https://help.sap.com/docs/cloud-identity-services
Joule Work — Connect SAP Systems https://help.sap.com/docs/joule/joule-work/connect-sap-systems
Joule Studio — User Roles https://help.sap.com/docs/joule-studio/joule-studio/user-roles
#SAPCHANNEL