domain-separation

Manage ServiceNow domain separation configurations and user-domain memberships.

77|23|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/groeimetai/snow-flow --skill domain-separation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: domain-separation
Source: https://github.com/groeimetai/snow-flow/tree/main/packages/opencode/src/bundled-skills/domain-separation
Command: npx skills add https://github.com/groeimetai/snow-flow --skill domain-separation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the complexities of managing multi-tenant environments in ServiceNow, enabling secure data partitioning and user access control across different business units or clients.

Core Features & Use Cases

  • Domain Configuration: Set up and manage domain hierarchies, including parent-child relationships.
  • User Domain Management: Assign users to specific domains and manage their primary domain.
  • Data Access Control: Ensure records are only visible within their designated domains or accessible across domains as per configuration.
  • Use Case: An MSP needs to onboard a new client, creating a dedicated domain for them, assigning the client's administrator user to this domain, and configuring specific tables to be domain-separated for data isolation.

Quick Start

Use the domain-separation skill to create a new domain named 'Client XYZ' with 'MSP Global' as its parent domain.

Frequently Asked Questions about domain-separation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure ServiceNow domain separation for multi-tenancy?

ServiceNow domain separation is configured by creating domain hierarchies with parent-child relationships and assigning users to primary domains to enforce data partitioning and access control across tenants.

What is the best way to onboard a new MSP client in ServiceNow with tenant isolation?

The best way to onboard an MSP client is to create a dedicated domain, assign the client administrator to that domain, and configure specific tables as domain-separated to ensure strict tenant data isolation.

How does domain separation control data access across different tenants in ServiceNow?

Domain separation controls data access by ensuring records are only visible within their designated domains or accessible across domains according to configured domain-aware data access policies.

Can I manage parent-child domain hierarchies for MSP environments in ServiceNow?

Yes, you can manage parent-child domain hierarchies in ServiceNow to support MSP environments, allowing structured multi-tenancy where client domains inherit configurations from a top-level MSP domain.

Does ServiceNow domain separation require assigning users to a primary domain?

Yes, ServiceNow domain separation requires assigning users to a specific primary domain to determine their default data visibility and enforce correct access boundaries within the multi-tenant environment.

What are the limitations of ServiceNow domain separation for multi-tenant access control?

ServiceNow domain separation requires careful configuration of domain-aware data access policies, as misconfigured cross-domain visibility or user-domain memberships can lead to unintended data exposure across tenant boundaries.