Implementing cloud services in user account environment

A system comprising:

• at least one hardware processor;
• and
• a non-transitory computer-readable medium storing executable instructions that, when executed, cause the at least one hardware processor to perform operations comprising:
• receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment;
• and
• deploying, by the management system, the instance of the application platform of the cloud service provider to a workload cluster in the user environment based on the received user request using the credential data to access the user environment, the instance of the application platform being deployed to be run in the workload cluster in the user environment to provide, from within the user environment, one or more cloud services of the cloud service provider to one or more users associated with the user account.