Does the sys_user_visibility Table Accurately Reflect All Domains a User Can Access?

[SB87]

I'm trying to determine whether the sys_user_visibility table in ServiceNow provides a complete list of all domains a user has access to. Specifically, does this table include domains inherited through user groups, or should I also consider other tables such as sys_user_group_visibility?

From my initial testing, it appears that sys_user_visibility does include domains inherited via group membership, which suggests it may already provide a comprehensive view of domain access for a user.

Could anyone confirm if this understanding is correct, or if there are additional tables or considerations I should be aware of?

[Dr Atul - LNG]

Hi @SB87 

Yes, your understanding is mostly correct. The sys_user_visibility table does include domains inherited via group membership. When a user is a member of a group that has domain access, the effective visibility for the user is reflected in sys_user_visibility.

[SB87]

@Dr Atul - LNG I am confused by what is meant by "mostly correct" in your reply. I am unable to view the knowledge article you have linked in your other comment.

Is it correct the sys_user_visibility  can be used to determine all domains a user can view? If not, what else is required?

Many thanks.

[Dr Atul - LNG]

Hi @SB87 

Sorry for the wrong word selection. Your understanding is correct. You need a ServiceNow ID / linked ID to open this site.

[Dr Atul - LNG]

Hi @SB87 

https://noderegister.service-now.com/kb?id=kb_article_view&sysparm_article=KB0715934

https://www.jadeglobal.com/blog/servicenow-domain-separation