## 4.3.3  Provision Users from SAP Analytics Cloud to SAP Build Work Zone Using IPS
Provision and sync your users from SAP Analytics Cloud to SAP Build Work Zone using IPS so they have access to analytical insights.
For your users to use analytical insights in Joule, their SAP Analytics Cloud user accounts, roles, and permissions need to be synced to SAP Build Work Zone using the Identify Provisioning Service (IPS). The basic steps are as follows:
- Set up SAP Analytics Cloud as a source system in the SAP Identity Provisioning Service (IPS).
- Set up SAP Build Work Zone as a target system in the SAP Identity Provisioning Service (IPS).
- Simulate, run, and validate user provisioning from your source SAP Analytics Cloud system to the target SAP Build Work Zone system.
- Schedule user provisioning updates in IPS to automate future synching.
## Set Up SAP Analytics Cloud as a Source System
Set up a new source system connection in IPS to your SAP Analytics Cloud tenant using the instructions found at: https:/ /help.sap.com/docs/cloud-identity-services/cloud-identity-services/sap-analytics-cloud. A unique source system connection pointing to your SAP Analytics Cloud tenant is required specifically for the Joule and SAP Analytics Cloud integration. You can re-use the same username and password values if you have multiple source system connections to your tenant.
Before you do the initial save of the source system, set the sac.api.version to be 2 . Otherwise, you'll need to reset the transformations.
You'll also need to set ips.http.header.x-sap-scim-groups-v3 to be true .
## Setup SAP Build Work Zone as a Target System
Create SAP Build Work Zone as a target system in IPS using the following instructions for the appropriate edition:
- SAP Build Work Zone, standard edition
Under Details , for source systems, choose the SAP Analytics Cloud source system you had created. Ensure this is distinct from other SAP Analytics Cloud source systems already in IPS.
Under Properties , for cflp.providerId , use sac.analytics . This value should align with the Provider ID you had previously set up in SAP Build Work Zone for the integration between it and SAP Analytics Cloud.
## Simulate User and Group Provisioning
Go the SAP Analytics Cloud source system, navigate to the Jobs tab, and choose Run Now on the Simulate Job row.
Go to Identity Provisioning Provisioning Logs to check the result. There should be no errors.
## Run User and Group Provisioning
Go the SAP Analytics Cloud source system, navigate to the Jobs tab, and choose Run Now on the Read Job row.
Go to Identity Provisioning Provisioning Logs to check the result. There should be no errors.
## Validate Provisioning
Visit SAP Build Work Zone using a user with the Launchpad\_Admin role. From the side navigation, choose Settings and go to the Identity Provisioning tab. Enter the email address of a user from SAP Analytics Cloud. Validate that they have the appropriate role IDs.
-  Tip
If you don't see the role information synced, go back to the SAP Analytics Cloud source system Jobs tab and try using Run Now on the Resync Job row instead.
## Schedule User and Group Provisioning
To schedule a sync from SAP Analytics Cloud to SAP Build Work Zone, perform the following steps:
1. Sign in to SAP Cloud Identity Services.
2. Go to the Identity Provisioning tab and choose Source Systems .
3. Select your SAP Analytics Cloud source system.
4. Go to the Jobs tab.
5. Choose the Schedule button on the Read Job row and configure your recurrence details.
## Next Steps
Now that your users are provisioned and synced between SAP Analytics Cloud and SAP Build Work Zone, they have access to use the analytical insights feature in Joule. Next you can make your own business data available to analytical insights by indexing it in the just ask feature of SAP Analytics Cloud.
For details, see: Index Your Data Using Just Ask and Test Your Integration [page 40]