Does the sys_user_visibility Table Accurately Reflect All Domains a User Can Access?

[SB87]

I'm trying to determine whether the sys_user_visibility table in ServiceNow provides a complete list of all domains a user has access to. Specifically, does this table include domains inherited through user groups, or should I also consider other tables such as sys_user_group_visibility?

From my initial testing, it appears that sys_user_visibility does include domains inherited via group membership, which suggests it may already provide a comprehensive view of domain access for a user.

Could anyone confirm if this understanding is correct, or if there are additional tables or considerations I should be aware of?

[Ravi Gaurav · Accepted solution]

Hi @SB87 
You’re on the right track .

sys_user_visibility does indeed provide the complete list of domains a user can access, including those inherited via group membership. sys_user_group_visibility is only useful if you want to trace the inheritance path; it’s not needed to calculate the final access list.