Skip to content
IT Canvass
Administration · Lesson

Domain separation

Quick answer

How domain separation isolates data and process for multiple business units or customers, and when it is the wrong answer.

Key takeaways

  • Domain separation is a platform level decision, not a per table setting
  • Process separation costs maintenance, use it sparingly
  • Users inherit domain from their user record, groups can override it
  • Reversing domain separation is a project, not a configuration change

What it does

Domain separation partitions data and configuration by domain so a user in one business unit sees only their records, while a support group at the top of the tree can see everything below it. It is used by managed service providers and by groups that cannot legally share data.

Data versus process separation

Data separation splits records. Process separation goes further and lets each domain have its own business rules, workflows, catalog items and SLAs. Process separation multiplies the amount of configuration you maintain, so turn it on only where a domain genuinely needs different behaviour.

Before you enable it

It changes every query on the instance and cannot be reversed cleanly.

  • Model the domain tree first, including the global domain at the top
  • Decide which tables stay global, for example the CMDB is often shared
  • Plan how users get their domain, usually from the company or department on sys_user
  • Test reporting early, cross domain reports need a visibility domain

Want to learn this properly?

Our live, instructor-led ServiceNow Training covers this hands-on, with real projects and a certification path.

Check your understanding

  1. Which scenario justifies domain separation?

    • A. Two teams want different form layouts
    • B. A provider hosts several client organisations on one instance
    • C. A group wants its own dashboard
    • D. Separating dev and prod
    Show answer

    B. A provider hosts several client organisations on one instance

    Contractual isolation between customers is the classic use case.

  2. What does process separation add over data separation?

    • A. Faster queries
    • B. Per domain business rules, workflows and SLAs
    • C. Separate database servers
    • D. Domain specific licensing
    Show answer

    B. Per domain business rules, workflows and SLAs

    Process separation lets configuration differ per domain, at the cost of maintenance.

Frequently asked questions

Do we need domain separation for departments in one company?

Usually not. Roles, groups and ACLs handle departmental privacy in most internal deployments. Domain separation is for legal or contractual isolation, typically service providers.

Does domain separation apply to the CMDB?

It can, but many providers keep the CMDB global and separate at the service or CI level instead, because shared infrastructure often supports several domains.
CallWhatsAppEnquire