Group assignment across domains

farnous
Tera Contributor

Hello, 

I have this domain hierarchy

TOP

  • Domain 1 (MSP)
  • Domain 2 

I have a flow in Domain 2 that contains create catalog item task action 
I want to set the assignment group for this action to a group in Domain 1

How that can be done without giving Domain 2 visibility for Domain 1
I don't want data and records from Domain 1 to be visible in Domain 2

6 REPLIES 6

JP - Kyndryl
Kilo Sage

Hi Farnous,

You need to set your MSP users in a special domain (let's call it MSP).

You then add to domain1 and domain 2, "contains domain MSP",  so these domains will see the MSP users and can assign records to them.

MSP users will always have to select their current domain of work via the Domain picker.

You need to make sure that MSP users cannot create any records in the MSP domain, else these records will be seen by the 2 customer domains.

 

Regards.

JP

Regards,
JP

Hi JP,

So basically if our domain is already MPS (we can see all our client domains), and we want to share some of our assignment groups to clients , in order they can reassign some incidents/cases to our Groups and users (let's call it TOP escalation, when they can't solve issue themselves in their domain), we need to:

 - move out this assignment groups from MSP domain to new one - let's call it MSP_SUPPORT.

 - add containership rule where MSP_SUPPORT contains MSP (in order they can see everything that original MSP can see)

- add visibility rule to each of our clients in order they can see MSP_SUPPORT data, but don't see MSP data because it's not contains but just visibility.

Is my understanding correct?

Regards.

 

Hi Ihor,

I think your reasoning is fine and it will be more restricting than how I wrote it.

I would suggest you test it on your PDI instance before applying it on your customer instance.

Regards.

JP

 

Regards,
JP

Another thing I found that we can just put this groups to Global, then all domains will see them.