Application Portfolio Management supports domain separation for managed service
providers (MSPs) to protect the sensitive data of each customer. The protection also ensures
inability to view business application data of one customer by another customer and also
secures the data within the domain.
Install the Domain Support – Domain Extensions Installer system plugin to
enable the domain separation feature for APM.
Create an administrator role at each domain level.
The administrator can only configure and run the scheduled jobs.
Create all your application portfolio data entities in the domain, specific to
the enterprise, and not at the global level.
Create indicators at the domain level.
Do not create them at the global level and reuse the indicators for every
customer under the parent level. Data is not visible at the global
Create user groups and assign roles to users at the domain level, so that they
can view only the data of the enterprise they belong to.
Execute jobs for domain separated data.
You can execute scheduled jobs, certification schedules, and assessments of
indicators and scores at the domain level using the Run as role. Configure
the Scheduled Script Execution form layout to add the Run
as field from the Context menu.