Application support for domain separation

Not all ServiceNow applications support domain separation in the base system. Some supported applications include limitations on the data and administrative settings that can be domain separated.

Domain Separation support levels

While some applications include architectural support for domain separation, they may not have support for domain separated administration and workflows. For this reason, ServiceNow applications are defined with the following support levels.

These definitions delineate the domain separation support level system, which operates from the perspective of actual use cases and personas.
Data only

The application supports the data security model of separating visibility of data from one domain to another.

Level 1
Level 1 support targets tenant domain Requestor use cases. This means that an application has been designed to support Requestor activities within tenant domains.
Level 2
Level 2 support targets tenant domain Fulfiller use cases. This means that an application that supports Level 2 domain separation can be used by the Fulfiller within the tenant domains. An application with Level 2 domain support includes Level 1 (Requester) and Level 2 (Fulfiller) support. The entire application can be used as a tenant domain-owned application.
Level 3
Level 3 support targets the tenant domain administrator use cases. Applications with Level 3 domain separation support have been designed with prescriptive domain-separated configuration capabilities which can be administered by a tenant domain administrator.
Supported feature Data only Level 1 Level 2 Level 3
Supported tenant domain user role. Data only Requester Fulfiller Administrator
Data can be domain separated. supported supported supported supported
Domain column is present for base system application tables. supported supported supported supported
Domain-specific configuration is managed by instance owner. supported supported supported
Tenant domains can manage their own application data. supported supported
Application properties are domain aware when needed. supported supported
Business logic and processes can be domain separated by instance owner. supported supported
Business logic and processes can be administered by tenant domain. supported
Table 1. Application support for domain separation
Product Suite Application Support level Notes
Business Management Agile Development Data only Product models not domain separated. System properties cannot be domain separated.
Application Portfolio Management Data only
Cost Management No support
Financial Management No support
Project Portfolio Management Data only Architectural support only. Certain properties cannot be domain separated.
Test Management No support
Customer Service Management Communities Data only
Customer Service Management Level 1
Field Service Management Level 1
Governance, Risk, and Compliance Governance, Risk, and Compliance (GRC) Data only
Vendor Risk Management Data only
HR Service Delivery HR Service Delivery Level 1
IT Operations Management Cloud Management No support
Discovery Level 2
Event Management Level 1
Operational Intelligence Data only
Service Mapping Level 1
IT Service Management Asset Management Data only License calculations supported in global scope only.
Benchmarks No support
Change Management Level 1
Contract Management Data only
Cost Management
Expense Line Data only
Incident Alert Management Data only Can be separated through customization.
Incident Management Level 2
On Call Scheduling Level 2
Problem Management Level 2 Task-outage relationship includes architectural support only.
Procurement Data only
Product Catalog No support
Release Management No support
Service Catalog Management Data only Service Catalog administration is not domain separated. However, items can be domain separated through user interface. Tasks created are domain separated.
Service Desk Call Level 1
Service Level Management Level 2
Service Portfolio Management Data only Architectural support only.
Structured Problem Analysis Level 1
Now Platform Assessments Level 2
Automated Test Framework Data only Because application tables are not domain separated, data is not visible in child domains.
Connect Support and Chat Level 1 Connect Chat supported within each domain only. Connect Support dashboard and queues do not support Domain Separation.
Contextual Search Level 2
Configuration Management Database (CMDB) Level 2 CMDB CIs are domain separated.
Content Management System Data only Can be separated with customization.
Credentials and Connections Level 1
Data Certification Data only
Delegated Development Level 1 Application Administration must be enabled.
Dependency Views Level 1
Edge Encryption Data only Architectural support only.
Encryption Support
Flow Designer Data only
Homepages Data only
Integrations with third-party applications and data sources Data only
Knowledge Management Level 2
Managed Documents Data only
MetricBase Data only
Mobile Data only
Notifications Level 2
ODBC Driver Data only The ODBC user domain restricts access to data.
Orchestration Data only Additional support possible, but depends on use case.
Password Reset Level 2
Platform Security Level 1
Script Debugger Level 2
ServiceNow® User Interface Level 2
Service Portal Data only Architectural support only.
State Flow Data only
Subscription Management No support
Surveys Data only Architectural support only.
Time Card Data only Can be separated with customization.
Virtual Agent No support
Visual Task Boards Data only
Web services Data only Additional support possible, but depends on use case.
Workflow Data only Additional support possible, but depends on use case.
Performance Analytics and Reporting Dashboards Data only Architectural support only.
Performance Analytics Level 3 Can be domain separated, except for separated properties.
Reporting Level 2
Security Operations Security Incident Response Level 2
Threat Intelligence Level 2
Trusted Security Circles Level 2
Vulnerability Response Level 2
Service Management - Other Facilities Service Management Data only
Finance Service Management Data only
Legal Service Management Data only
Marketing Service Management Data only
Planned Maintenance Data only
Service Management Core Data only
Software Asset Management Software Asset Management No support Only the alm_assettable is domain separated.
Vendor Performance No support