SAP BTP
for LuumenAI
Gateways, jobs, and subaccounts operated from one governed chat.
SAP estates carry the most consequential operations work — and the least tolerance for guesswork. LuumenAI reads job status, interface queues, and subaccount configuration from SAP BTP alongside host sessions and tickets, then runs restarts and configuration changes only as previewed, approved steps that are written to the audit log and linked to the change.
The SAP BTP toolbox
41 tools: 30 read, 11 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadGet DestinationGet a destination by name from a subaccount or service instance.
- ReadList DestinationsList destinations for a subaccount (or optionally a service instance).
- ReadGet Destination CertificateGet a destination certificate by name from a subaccount or service instance.
- ReadList Destination CertificatesList destination certificates for a subaccount or service instance.
- ReadGet Destination TrustGet destination trust certificate details for a subaccount.
- ReadList Directory Service AssignmentsDistribution view of a directory's entitlements: each service plan with its per-entity assignments (entity id, type, state, assigned amount) to subdirectories and subaccounts.
- ReadList Directory Service EntitlementsCapacity view of a directory's entitlements: each entitled service, app, or environment plan with its total quota amount, the remaining_amount still to distribute, and available data centers.
- ReadGet EnvironmentGet details of a specific environment in a subaccount.
- ReadList EnvironmentsList all available environments for a subaccount.
- ReadGet Environment InstanceGet details of a specific environment instance in a subaccount.
- ReadList Environment InstancesList all environment instances for a subaccount.
- Readget_connector_infoGet trust attestation about how this connector reaches SAP: API source, authentication method, access mode, persistence policy and which SAP services are wired.
- Readget_posture_scoreGet the overall BTP security posture score (0-100) plus per-domain scores for Security, Access, Connectivity and Resilience, with a band of ok/review/atrisk/critical.
- ReadGet Global AccountGet details of a specific global account.
- ReadList Global AccountsList all global accounts.
- ReadList Global Account Service AssignmentsDistribution view of a global account's entitlements: each service plan with its per-entity assignments (entity id, type, state, assigned amount) to directories and subaccounts.
- ReadList Global Account Service EntitlementsCapacity view of a global account's entitlements: each entitled service, app, or environment plan (a right to consume it) with its total quota amount, the remaining_amount still to distribute, and…
- Readlist_destinationsList destination configurations with their name, URL, authentication type, proxy type and level (subaccount or instance).
- Readlist_entitlementsList service plan entitlement assignments for the subaccount — service name, plan, amount and remaining quota.
- Readlist_findingsList governance findings from the Luumen posture engine — one row per rule check across the Security, Access, Connectivity and Resilience domains, sorted most-urgent-first.
- Readlist_role_collectionsList XSUAA role collections with their descriptions, role references and assigned user counts.
- Readlist_subaccountsList BTP subaccounts with their display name, subdomain, region and state.
- ReadBuild Navigation LinkBuild SAP BTP cockpit URL.
- ReadList RegionsList regions in a global account.
- Readsearch_audit_logSearch BTP audit log records within an explicit time window.
- ReadGet SubaccountGet details of a specific subaccount.
- ReadList SubaccountsList subaccounts for a global account.
- ReadList Subaccount Service QuotasThe subaccount's own consumption view: each assigned service plan with its quota (the numeric maximum the subaccount may consume) or unlimited when uncapped.
- ReadGet SubscriptionGet details of a specific subscription in a subaccount.
- ReadList SubscriptionsList all subscriptions for a subaccount.
- WriteEnable Cloud Foundry EnvironmentEnable Cloud Foundry environment in a subaccount. Approval by default
- WriteCreate DestinationCreate a destination in a subaccount or service instance. Approval by default
- WriteDelete DestinationDelete a destination from a subaccount or service instance. Approval by default
- WriteUpdate DestinationUpdate a destination in a subaccount or service instance. Approval by default
- WriteAssign Directory EntitlementAssign or update the entitlement plan of a service, multitenant application, or environment to a directory. Approval by default
- WriteCreate SubaccountTriggers creation of a subaccount in a global account in the provided region. Approval by default
- WriteDelete SubaccountTriggers deletion of a subaccount from a global account. Approval by default
- WriteSubscribe SubaccountSubscribe a subaccount to an application. Approval by default
- WriteUnsubscribe SubaccountUnsubscribe a subaccount from an application. Approval by default
- WriteUpdate SubaccountUpdate details of a specific subaccount. Approval by default
- WriteAssign Subaccount EntitlementAssign or update the entitlement plan of a service, multitenant application, or environment to a subaccount. Approval by default
One prompt, start to finish
What a governed SAP BTP run looks like inside Luumen.
Questions
Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — enable cloud foundry environment, create destination, delete destination, update destination, and more — is shown as a plan and requires approval by default, including the 3 actions classified as destructive. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
SAP BTP is available on the enterprise plan. Talk to us about enabling it for your account — the rest of the catalogue is available on every plan.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to SAP BTP — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
Put SAP BTP to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.