Phani Puttabakula - Aug 27, 2025

SAP BTP Subaccount Strategy: Leveraging Directories for Multi-Division Organizations

Part of SAP BTP Series

Executive Summary

For organizations with distinct divisions like SAP Financials and Customer Service, SAP BTP’s directory structure provides an optimal solution for balancing governance, budget control, and technical requirements. This blog explores how to strategically use directories to align your cloud architecture with organizational structures while maintaining operational efficiency. This strategy also ensures that security roles and access controls align with organizational boundaries, minimizing risks while enabling division-specific autonomy.

The Challenge: Two Divisions, One Cloud Strategy

When organizations have separate divisions with:

  • Different managers and budgets (SAP Financials vs Customer Service leadership)
  • Distinct on-premise landscapes (SAP Financials: DEV/QAS/PRD, Customer Service: DEV/QAS/PRD)
  • Separate business domains (SAP Financials, SAP Utilities)
  • Shared cloud requirements (Integration Suite, Datasphere, SAP Build, Kyma)

The traditional approach of cramming everything into subaccounts creates governance headaches and budget confusion.

The Solution: Directory-First Architecture

Understanding BTP Directories

Directories sit between your Global Account and Subaccounts, providing:

  • Quota & entitlement allocation at the organizational level
  • Budget separation aligned with business funding
  • Delegated administration for division managers
  • Role-based access control (RBAC) to assign security roles per division
  • Clean lifecycle mapping to on-premise systems

Recommended Architecture

Service Placement Strategy

SAP Financials Directory Services

Place here when:

  • Services primarily support SAP Financials scenarios
  • SAP Financials division funding applies
  • Lifecycle ties to DEVβ†’QASβ†’PRD

Examples: SAP Financials-specific Integration Suite flows, finance approval apps, GL analytics

Customer Service Directory Services

Place here when:

  • Services primarily support SAP Utilities/customer service scenarios
  • Customer Service division funding applies
  • Lifecycle ties to DEVβ†’QASβ†’PRD

Examples: Meter-to-cash integrations, customer self-service apps, utility billing analytics

Shared Directory Services

Place here when:

  • Cross-divisional functionality is required
  • Central governance is preferred
  • Cost optimization through shared resources

Examples: Corporate identity services, cross-domain analytics, monitoring

Decision Matrix for Key BTP Services

Service / Use Case Place in SAP Financials Directory Place in SAP Utilities Directory Place in Shared Directory Notes
Integration Suite βœ… Financial scenarios (FI/CO integrations, vendor/customer sync) βœ… Customer Service/Utilities scenarios (meter-to-cash, billing, CRM integration) βœ… End-to-end flows across SAP Financials + SAP Utilities, external partners If budgets are separate, duplicate per directory. If governance favors centralization, host once in Shared.
SAP Build (Apps, Workzone, Process Automation) βœ… SAP Financials extensions (finance approval apps, workflow for FI docs) βœ… SAP Utilities extensions (customer self-service apps, meter-read workflow) ❌ Rarely shared unless both divisions want a common UX portal Usually more efficient per-division since apps differ.
Kyma Runtime (Cloud-native dev) βœ… SAP Financials extensions requiring microservices βœ… SAP Utilities extensions requiring microservices ❌ Unless central dev platform is desired Typically per-division. Shared only if strong central DevOps.
SAP Datasphere (Analytics) βœ… Finance-only analytics (GL, AP, AR) βœ… SAP Utilities-only analytics (meter data, customer KPIs) βœ… Cross-domain analytics (finance + SAP Utilities insights combined) Datasphere often benefits from Shared Directory since analytics typically spans domains.
Identity & Security Services ❌ ❌ βœ… Centralized (Identity Authentication, Provisioning, Audit Log) Security is usually shared to enforce corporate standards.
Connectivity (Cloud Connector, Destinations) βœ… SAP Financials on-premise connections βœ… SAP Utilities on-premise connections ❌ Each directory manages its own Cloud Connector Keeps lifecycle mapping clean.
Monitoring / Logging ❌ ❌ βœ… Central subaccount for monitoring/alerting Optional β€” depends if IT wants central observability.

Implementation Benefits

For Business Leadership

  • Clear budget accountability - SAP Financials manager controls SAP Financials directory spend
  • Autonomous decision-making - Each division manages its own cloud evolution
  • Aligned governance - Directory structure mirrors organizational structure
  • Assured access control – Business-sensitive data protected via directory-based roles
  • Delegated responsibility – Division managers can safely grant/revoke roles without impacting other divisions

For IT Teams

  • Simplified lifecycle management - DEV/QAS/PRD flows remain division-specific
  • Flexible integration - Share services where it makes sense, separate where it doesn’t
  • Scalable architecture - Easy to add new divisions or reorganize as business changes
  • Simplified role management – Assign roles at directory level rather than per subaccount
  • Improved compliance – RBAC enforces segregation of duties across divisions
  • Audit readiness – Centralized Shared Directory supports security logging and monitoring

For Finance Teams

  • Transparent cost allocation - Entitlements and usage clearly mapped to divisions
  • Budget control - Prevent SAP Financials spending from impacting Customer Service budgets
  • Chargeback simplicity - Directory-level reporting for internal billing

Migration Approach

Phase 1: Directory Foundation

  1. Create SAP Financials and Customer Service directories in Global Account
  2. Establish entitlement allocation between directories
  3. Set up directory-level administrative access

Phase 2: Lifecycle Mapping

  1. Create dev/QAS/PRD subaccounts within each directory
  2. Configure connectivity to respective on-premise systems
  3. Implement security and identity integration

Phase 3: Service Optimization

  1. Deploy division-specific services (Build, Integration Suite instances)
  2. Implement shared services where beneficial (Datasphere, security)
  3. Establish cross-directory integration patterns as needed

Key Success Factors

Governance First

  • Align directory structure with organizational funding and responsibility
  • Establish clear ownership and administration models
  • Define cross-directory collaboration processes

Technical Excellence

  • Maintain clean lifecycle mapping (devβ†’QASβ†’PRD)
  • Implement proper security and connectivity patterns
  • Plan for cross-division integration requirements

Cost Optimization

  • Balance division autonomy with shared service efficiency
  • Monitor usage patterns to optimize service placement
  • Regular review of shared vs. separate service decisions

Conclusion

Leveraging BTP directories transforms a complex multi-division cloud strategy into a manageable, governable architecture. By aligning technical structure with business organization, you achieve the best of both worlds: divisional autonomy where needed and shared efficiency where beneficial.

The key is starting with governance requirements (separate budgets, different managers) and then optimizing for technical efficiency (shared analytics, integrated workflows). Directories provide the perfect organizational layer to balance these often competing needs.

Next Steps:

  1. Map your current organizational structure to proposed directory design
  2. Analyze service requirements for shared vs. separate placement
  3. Define governance model for directory administration
  4. Plan phased implementation starting with foundational directories

This approach ensures your SAP BTP investment delivers maximum value while respecting organizational realities and enabling future growth.


✍️ BlueFunda, Inc., SAP Open Ecosystem Partner.

Interested in pilots or collaboration? Connect with us on LinkedIn or join our Discord community.

For direct inquiries, reach out to your Customer Success Manager or email us at info@bluefunda.com.

Think SAP. Think Smart. Think BlueFunda.

Share this article
LinkedIn