Data Masking Options for Offshore Access in Service Now DEV Instance

[attanhes]

Could you please advise if there is any way to mask data within tables in our ServiceNow DEV instance?

We are currently running a project that requires granting offshore users access to the DEV instance to carry out development.

Our primary concern is ensuring sensitive data is not exposed while still allowing offshore teams the necessary access to perform their development tasks.

Eg:-
Internal incident, change, and problem records
Contract records
knowledge articles
Attachments

[Shivalika]

Hello @attanhes 

Hello @attanhes 

It is the concept of Domains - where in the same instance, some group of users will be able to see few things and not others, basically segregation of data. 

https://www.servicenow.com/docs/bundle/yokohama-platform-security/page/administer/company-and-domain...

Kindly mark my answer as helpful and accept solution if it helped you in anyway. This will help me be recognized for the efforts and also move this questions from unsolved to solved bucket. 

Regards,

Shivalika 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeEISQCY

[attanhes]

Thanks for the quick response. I tried this in my PDI (Yokohama), but this table is not available. Do you have any other information?

[Shivalika]

Hello @attanhes 

It needs a plugin for Domain Separation - MSP plugin - enable that and then it will work. And it will definitely work as this is the only solution to separate data between two entities within single instance. 

Kindly mark my answer as helpful and accept solution if it helped you in anyway. This will help me be recognized for the efforts and also move this questions from unsolved to solved bucket. 

Regards,

Shivalika 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeEISQCY

[Chaitanya ILCR · Accepted solution]

Hi @attanhes ,

Assuming you are going to give them admin access the domain separation won't work as admin role contains role the domain_admin role.

The sensitive data should never exist in the dev environment, that information should be excluded in the clones. or should be cleaned up post the clone using clone cleanup scripts.

Please mark my answer as helpful/correct if it resolves your query.

Regards,
Chaitanya