When a user of parent domain has visibility on child domain, what records of child domain are they supposed to have access to?

[reeba1]

Hello,

I want to know more about domain visibility. 

 When a user of parent domain has visibility on child domain, what records  of child domain are they supposed to have access to?  Should they also be able to view the user records of child domain's users?

and When a user has of domain A has visibility on domain B, what does that generally mean?

Regards,

Reeba

[Hussain Kachwal]

Hello Reeba,

You would need to follow the below:

Adding Domains to a Visibility Domains List:

Adding a visibility domain allows a user or group to see and potentially edit records from another domain regardless of the user or group's normal domain membership. Assigning visibility domains to all members of a group is preferred over granting them to individual users.

Note: Adding a visibility domain does not change a table or record's access control rule requirements.


To grant visibility domains to a group:
1. Navigate to User Administration > Groups.
2. Select the group you want to provide with visibility domains.
3. Add the Visibility domains related list to the form.
4. From the Visibility domains related list, click Edit.
5. Select the domain records you want the group or domain to see.
6. Click Save, and then click Update.

To grant visibility domains to an individual user:
1. Navigate to User Administration > Users.
2. Select the user you want to provide with visibility domains.
3. Add the Visibility domains related list to the form.
4. From the Visibility Domains related list, click Edit.
5. Select the domains whose records you want the user to see.
6. Click Save, and then click Update.

The Visibility domain embedded list contains the following fields.

Field         Description
Domain         Domain that is visible to the group or user.
Inherited         Indicates the domain is inherited from domain visibility or a parent domain.
Granted By     Name of the group that granted domain visibility.
Parent visibility     Name of the parent domain and used for grouping records. If the parent record is deleted, then all records with the same         parent are deleted as well.

Kindly mark as Answered or Helpful, if applicable.

-Hussain K

[reeba1]

Hello Hussain,

Thankyou for explaining this. I have just one more doubt.

I found the below paragraph in servicenow docs:

A visibility domain:

• Is a user-to-domain relationship and is explicitly granted.
• Is not a child domain.
• Is not controlled by the selection in the domain picker. Once the user is granted access to a visibility domain, they always see data in that domain and its children.

So, does that mean a parent domain user can view and manage child domains user records without having any visibility to it? If not, what does this mean?

Regards,

Reeba

[reeba1]

Hussain, I have one more doubt. Please excuse me because I am getting a bit confused about this domain visibility.

  Suppose a user of domain A(parent domain) has visibility on domain B(child domain). To view the records of domain B, does he need to select the domain B from the domain selector first or would he be able to see it even when he is domain A?