# US 2025/0159040 A1 · Implementing cloud services in user account environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2025/0159040 A1 - Document ID: US20250159040A1 - Status: Published application - Kind: A1 - Application number: 19/024,430 - Filed: 2025-01-16 - Published: 2025-05-15 - Earliest claimed: 2020-05-11 - Assignees: Sap SE - Applicants: Sap SE - Inventors: Jannick Stephan Fahlbusch; Joerg Lenhard - Web page: https://patentgrep.com/patent/US20250159040A1 ## CPC - H04L 67/1001: for accessing one among a plurality of replicated servers - G06F 9/505: {considering the load} - G06F 9/5072: {Grid computing} - G06F 9/5077: {Logical partitioning of resources; Management or configuration of virtualized resources (specific details on emulation or internal functioning of virtual machines G06F9/455)} - G06F 11/0709: {in a distributed system consisting of a plurality of standalone computer nodes, e.g. clusters, client-server systems} - G06F 11/0751: {Error or fault detection not based on redundancy (power supply failures G06F1/30; network fault management H04L41/06)} - G06F 11/0793: {Remedial or corrective actions (recovery from an exception in an instruction pipeline G06F9/3861; by retry G06F11/1402; for recovering from a failure of a protocol instance or entity H04L69/40)} - G06F 11/1469: {Backup restoration techniques} - G06F 11/3409: {for performance assessment} - H04L 63/102: {Entity profiles} - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - G06F 2201/80: Database-specific techniques - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Techniques for implementing cloud services of a cloud service provider in a dedicated user account environment in a distributed computing system are disclosed. In some example embodiments, a computer-implemented method comprises: receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment; and deploying, by the management system, the instance of the application platform to a workload cluster in the user environment using the credential data to access the user environment. ## Claims ### Claim 1 A computer-implemented method performed by a computer system having a memory and at least one hardware processor, the computer-implemented method comprising: receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment; and deploying, by the management system, the instance of the application platform of the cloud service provider to a workload cluster in the user environment based on the received user request using the credential data to access the user environment, the instance of the application platform being deployed to be run in the workload cluster in the user environment to provide, from within the user environment, one or more cloud services of the cloud service provider to one or more users associated with the user account. ### Claim 2 (depends on 1) The computer-implemented method of claim 1, wherein the deployed instance of the application platform is configured to detect a failure of a database instance. ### Claim 3 (depends on 2) The computer-implemented method of claim 2, wherein the failure of the database instance comprises a hardware failure. ### Claim 4 (depends on 2) The computer-implemented method of claim 2, wherein the failure of the database instance comprises a software failure. ### Claim 5 (depends on 1) The computer-implemented method of claim 1, wherein the limited permission restricts the management system from accessing user environment data stored in the user environment, the user environment data having been stored in the user environment based on use of a database instance by the user associated with the user account. ### Claim 6 (depends on 1) The computer-implemented method of claim 1, further comprising: detecting, by the management system, a software update for the application platform. ### Claim 7 (depends on 1) The computer-implemented method of claim 1, wherein the management system resides in a provider environment within the distributed computing system, the provider environment being separate from the user environment and dedicated to a cloud service provider account hosted by the distributed computing system, the cloud service provider account being different from the user account and belonging to the cloud service provider, and the cloud service provider having full administrative privileges in accessing the provider environment. ### Claim 8 A system comprising: at least one hardware processor; and a non-transitory computer-readable medium storing executable instructions that, when executed, cause the at least one hardware processor to perform operations comprising: receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment; and deploying, by the management system, the instance of the application platform of the cloud service provider to a workload cluster in the user environment based on the received user request using the credential data to access the user environment, the instance of the application platform being deployed to be run in the workload cluster in the user environment to provide, from within the user environment, one or more cloud services of the cloud service provider to one or more users associated with the user account. ### Claim 9 (depends on 8) The system of claim 8, wherein the deployed instance of the application platform is configured to detect a failure of a database instance. ### Claim 10 (depends on 9) The system of claim 9, wherein the failure of the database instance comprises a hardware failure. ### Claim 11 (depends on 9) The system of claim 9, wherein the failure of the database instance comprises a software failure. ### Claim 12 (depends on 8) The system of claim 8, wherein the limited permission restricts the management system from accessing user environment data stored in the user environment, the user environment data having been stored in the user environment based on use of a database instance by the user associated with the user account. ### Claim 13 (depends on 8) The system of claim 8, wherein the operations further comprise: detecting, by the management system, a software update for the application platform. ### Claim 14 (depends on 8) The system of claim 8, wherein the management system resides in a provider environment within the distributed computing system, the provider environment being separate from the user environment and dedicated to a cloud service provider account hosted by the distributed computing system, the cloud service provider account being different from the user account and belonging to the cloud service provider, and the cloud service provider having full administrative privileges in accessing the provider environment. ### Claim 15 A non-transitory machine-readable storage medium, tangibly embodying a set of instructions that, when executed by at least one hardware processor, causes the at least one hardware processor to perform operations comprising: receiving, by a management system of a cloud service provider, a user request for creation of an instance of an application platform of the cloud service provider in a user environment within a distributed computing system, the user environment being dedicated to a user account hosted by the distributed computing system, the user request comprising credential data configured to provide the management system with limited permission for accessing the user environment, the limited permission restricting the management system from full administrative privileges in accessing the user environment; and deploying, by the management system, the instance of the application platform of the cloud service provider to a workload cluster in the user environment based on the received user request using the credential data to access the user environment, the instance of the application platform being deployed to be run in the workload cluster in the user environment to provide, from within the user environment, one or more cloud services of the cloud service provider to one or more users associated with the user account. ### Claim 16 (depends on 15) The non-transitory machine-readable storage medium of claim 15, wherein the deployed instance of the application platform is configured to detect a failure of a database instance. ### Claim 17 (depends on 16) The non-transitory machine-readable storage medium of claim 16, wherein the failure of the database instance comprises a hardware failure. ### Claim 18 (depends on 16) The non-transitory machine-readable storage medium of claim 16, wherein the failure of the database instance comprises a software failure. ### Claim 19 (depends on 15) The non-transitory machine-readable storage medium of claim 15, wherein the limited permission restricts the management system from accessing user environment data stored in the user environment, the user environment data having been stored in the user environment based on use of a database instance by the user associated with the user account. ### Claim 20 (depends on 15) The non-transitory machine-readable storage medium of claim 15, wherein the operations further comprise: detecting, by the management system, a software update for the application platform.