The ServiceNow® Data Separation application enables organizations to restrict access to sensitive data based on a lens hierarchy and its leaf node. Data Separation is a new application in the Vancouver release.

Data Separation highlights for the Vancouver release

  • Define hierarchy for Data Separation using a lens hierarchy and its leaf node to restrict data on ServiceNow® Strategic Portfolio Management.
  • Enable Data Separation on select entities and related entities, as needed.
  • Map user groups to various levels of the lens hierarchy to provide access in a hierarchical manner.
  • Use the sn_ds.ds_privileged_user role to access restricted data of any business function across the organization even when Data Separation is enabled.

See Data Separation for more information.

Important: Data Separation is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

Data Separation features

Data separation hierarchy
Use a lens hierarchy and its leaf node to define the hierarchy for Data Separation to restrict access to sensitive data for specific users of an organization.
Data separation on select entities
Enable Data Separation on select Demand, Project, Resource Plan, and Cost Plan entities, as needed. You can also enable Data Separation on select Cost Plan Breakdown and Project Task related entities.
Entity-group mapping
Map user groups to various levels of the lens hierarchy to provide access in a hierarchical manner.
Data separation privileged user role
Manage overall governance by using the sn_ds.ds_privileged_user role to access any record based on the existing access control rules (ACLs) that the user has, even when Data Separation is enabled.
Support for data separation
Data Separation supports records, related items, planning consoles, workbenches, and reports.
Note: ACL and query business rules (BR) limitations apply even when Data Separation is enabled. For example, reports with aggregate numbers may not be data separated.

Activation information

Install Data Separation by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Related ServiceNow applications and features

Portfolio Planning

Use the ServiceNow® Portfolio Planning application in the Data Separation application to enable data separation based on a lens hierarchy and its leaf node.

Project Portfolio Management

ServiceNow® Project Portfolio Management provides a simplified, team-oriented approach to managing project portfolios and IT development by combining several individual applications. Using the Data Separation application, you can restrict the sensitive data of Project Portfolio Management to specific users of an organization.