Account Model
Organisational Layer
Optional
Enterprise Governance

BTP Directories

Optional organisational grouping layer between a Global Account and Subaccounts. Directories support entitlement distribution, independent user management, and cost allocation — essential for large enterprise BTP landscapes.

What are BTP Directories?

Directories provide a second level of hierarchy for organising subaccounts by department, region, product line, or any other dimension meaningful to your enterprise. They are entirely optional — subaccounts can live directly under the Global Account — but become essential for large landscapes with 10+ subaccounts.

Directories can be configured with two optional features: Entitlements Management (allowing the directory to act as a quota pool for its child subaccounts) and User Management (allowing directory-scoped administrators separate from global account admins).

Directories appear in the BTP Cockpit as expandable folder nodes and can hold other directories (up to 5 levels of nesting) or subaccounts directly. They do not host applications — only subaccounts can host runtimes and service instances.

Quick Facts

Hierarchy
Global Acct → Directory → Subaccount
Max nesting depth
5 directory levels
Hosts apps?
No — subaccounts only
Entitlements
Optional feature (quota pool)
User management
Optional feature (dir admins)
Labels support
Yes — key-value pairs
Cost allocation
Via labels + entitlement mgmt
Deletion rule
Empty directory only (delete subs first)
BTP Directories — Domain-Based Organisation with Entitlement Distribution
Rendering diagram…

Directory Features

Entitlements Management
Quota Pool Mode
  • Directory receives quota allocation from global account
  • Acts as a pool that child subaccounts draw from
  • Prevents any one subaccount from consuming all quota
  • Visible in BTP Cockpit entitlement overview
  • Essential for department-level cost control
User Management
Governance Mode
  • Directory has its own administrator role collection
  • Directory admins can create/manage child subaccounts
  • Separate from global account admin rights
  • Enables self-service for business unit IT teams
  • Supports SCIM provisioning via IPS
Labels & Tagging
Cost Tracking
  • Key-value labels applied to directories and subaccounts
  • Common labels: cost_center, owner, environment, product
  • Used for filtering in BTP Cockpit
  • Drives cost attribution in billing reports
  • No limit on number of label pairs
Nested Sub-directories
Deep Hierarchy
  • Up to 5 levels of directory nesting
  • Useful for regional + domain dual-axis organisation
  • e.g., EMEA → Finance → Production subaccounts
  • Avoid deep nesting for small organisations
  • Each level can have independent entitlement management

Regional Hierarchy Pattern

Multi-Region Directory Pattern — Region → Domain → Environment
Rendering diagram…
When to use regional directories
Use regional directories when data residency requirements differ by geography (e.g., EU GDPR vs UAE PDPL), or when regional IT teams need autonomous management of their BTP subaccounts. Combine with entitlement management to pre-allocate service quota per region.

Enterprise Example — Global SAP Customer

A global SAP customer with operations across three regions creates directories aligned to geographic boundaries first, then business domains within each region. This enables regional IT autonomy while maintaining central billing visibility.

Level 1 DirectoryLevel 2 DirectorySubaccountsEntitlement Feature
EMEAFinancefin-emea-dev, fin-emea-prdEnabled
EMEAProcurementproc-emea-dev, proc-emea-prdEnabled
AMER(flat)amer-hr-dev, amer-hr-prdDisabled
APACHRhr-apac-dev, hr-apac-prdEnabled

Best Practices

Mirror your organisational chart

Align directories to cost centers, business domains, or regional IT boundaries. This makes cost attribution and governance natural rather than artificial.

Enable Entitlements Management on key directories

Activate the entitlement management feature on department-level directories to create quota pools. This prevents individual subaccounts from consuming all available quota.

Apply labels consistently

Use standardised labels (cost_center, owner, environment) on all directories. Inconsistent labelling makes billing reports impossible to use for chargeback.

Appoint directory-level administrators

Use the User Management feature to assign directory admins from each business unit. This decentralises day-to-day subaccount management while preserving global account control.

Review directory structure annually

Organisational structures change. Review directory hierarchy annually and refactor when business units merge, split, or change their SAP footprint significantly.

Common Pitfalls

Over-engineering directory hierarchy for small organisations
3+ levels of directories for an organisation with fewer than 20 subaccounts creates unnecessary complexity. Start flat and add structure as you grow.
Not using labels — makes cost allocation impossible
Directories and subaccounts without cost_center and owner labels cannot be attributed to business units in SAP BTP billing exports. Apply labels from day one.
Mixing functional and geographical groupings inconsistently
If EMEA uses regional directories but AMER uses domain directories, cost reports and access management become inconsistent and difficult to maintain.
Forgetting deletion dependency
A directory cannot be deleted until all its child subaccounts and sub-directories are deleted first. Plan deletions in reverse-depth order during decommissioning.

Security Considerations

Directory-scoped access reduces blast radius
Directory administrators can only manage subaccounts within their own directory. This principle of least privilege means a compromised directory admin cannot affect subaccounts in other parts of the BTP landscape.
Use separate directory admin accounts per major business unit — never share admin credentials.
Implement SCIM-based provisioning via Identity Provisioning Service (IPS) for automatic directory admin assignment from the corporate HR system.
Audit directory user assignments quarterly — remove stale directory admins who have changed roles.
Apply the principle of least privilege: most users should have Viewer access, not admin.

References