domain-separation

Manage ServiceNow domain separation configurations and user-domain memberships.

77|23|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/groeimetai/snow-flow --skill domain-separation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: domain-separation
Source: https://github.com/groeimetai/snow-flow/tree/main/packages/opencode/src/bundled-skills/domain-separation
Command: npx skills add https://github.com/groeimetai/snow-flow --skill domain-separation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the complexities of managing multi-tenant environments in ServiceNow, enabling secure data partitioning and user access control across different business units or clients.

Core Features & Use Cases

  • Domain Configuration: Set up and manage domain hierarchies, including parent-child relationships.
  • User Domain Management: Assign users to specific domains and manage their primary domain.
  • Data Access Control: Ensure records are only visible within their designated domains or accessible across domains as per configuration.
  • Use Case: An MSP needs to onboard a new client, creating a dedicated domain for them, assigning the client's administrator user to this domain, and configuring specific tables to be domain-separated for data isolation.

Quick Start

Use the domain-separation skill to create a new domain named 'Client XYZ' with 'MSP Global' as its parent domain.

Frequently Asked Questions about domain-separation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure ServiceNow domain separation for multi-tenancy?▼

ServiceNow domain separation is configured by creating domain hierarchies with parent-child relationships and assigning users to primary domains to enforce data partitioning and access control across tenants.

What is the best way to onboard a new MSP client in ServiceNow with tenant isolation?▼

The best way to onboard an MSP client is to create a dedicated domain, assign the client administrator to that domain, and configure specific tables as domain-separated to ensure strict tenant data isolation.

How does domain separation control data access across different tenants in ServiceNow?▼

Domain separation controls data access by ensuring records are only visible within their designated domains or accessible across domains according to configured domain-aware data access policies.

Can I manage parent-child domain hierarchies for MSP environments in ServiceNow?▼

Yes, you can manage parent-child domain hierarchies in ServiceNow to support MSP environments, allowing structured multi-tenancy where client domains inherit configurations from a top-level MSP domain.

Does ServiceNow domain separation require assigning users to a primary domain?▼

Yes, ServiceNow domain separation requires assigning users to a specific primary domain to determine their default data visibility and enforce correct access boundaries within the multi-tenant environment.

What are the limitations of ServiceNow domain separation for multi-tenant access control?▼

ServiceNow domain separation requires careful configuration of domain-aware data access policies, as misconfigured cross-domain visibility or user-domain memberships can lead to unintended data exposure across tenant boundaries.