Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.

Set up domain separation for APM users

Log in to subscribe to topics and get notified when content changes.

Set up domain separation for APM users

Application Portfolio Management supports domain separation for managed service providers (MSPs) to protect the sensitive data of each customer. The protection also ensures inability to view business application data of one customer by another customer and also secures the data within the domain.

Before you begin

Role required: admin

About this task

Figure 1. Illustration of a sample domain map
Illustration of a sample domain map


  1. Install the Domain Support – Domain Extensions Installer system plugin to enable the domain separation feature for APM.
  2. Create an administrator role at each domain level.

    The administrator can only configure and run the scheduled jobs.

  3. Create all your application portfolio data entities in the domain, specific to the enterprise, and not at the global level.
  4. Create indicators at the domain level.

    Do not create them at the global level and reuse the indicators for every customer under the parent level. Data is not visible at the global level.

  5. Create user groups and assign roles to users at the domain level, so that they can view only the data of the enterprise they belong to.
  6. Execute jobs for domain separated data.

    You can execute scheduled jobs, certification schedules, and assessments of indicators and scores at the domain level using the Run as role. Configure the Scheduled Script Execution form layout to add the Run as field from the Context menu.

    Figure 2. Scheduled jobs
    Scheduled jobs