Domain separation and Surveys

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Domain Separation and Surveys

    Domain separation in Surveys allows you to logically group data, processes, and administrative tasks into distinct domains. This feature ensures that users can only access data pertinent to their domain, enhancing data security and management. Survey creators (surveyadmin) can create surveys within their assigned domains, while Global domain users have broader access across all domains.

    Show full answer Show less

    Key Features

    • Data Access Control: Users can access survey records and take surveys based on their domain. Global domain users can access and participate in surveys across all domains.
    • Survey Assignment: Surveys can be assigned within the same domain or to Global domain users, but not to users from different domains.
    • Trigger Conditions: Global domain users can create conditions to trigger surveys from any domain, although they cannot assign surveys to users across different domains.

    Key Outcomes

    Implementing domain separation in Surveys allows ServiceNow customers to maintain organized and secure survey processes. This not only ensures that users engage with relevant data but also enhances the overall efficiency of survey management across different tenants. As a result, customers can expect improved compliance and data integrity within their survey operations.

    Domain separation is supported in Surveys. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data.

    Support level: Basic

    • Business logic: Ensure that data goes into the proper domain for the application’s service provider use cases.
    • The application supports domain separation at run time. The domain separation includes separation from the user interface, cache keys, reporting, rollups, and aggregations.
    • The owner of the instance must set up the application to function across multiple tenants.

    Sample use case: When a service provider (SP) uses chat to respond to a tenant-customer’s message, the customer must be able to see the SP's response.

    For more information on support levels, see Application support for domain separation.

    Overview

    As a survey creator, survey_admin can create surveys in the assigned domain. A Global domain survey_admin can create or edit survey in any domain.

    As a survey taker, a user can access the survey record and take the survey based on the domain of the survey record and user. Global domain users can take a survey in any domain.

    How domain separation works in Surveys

    There are several main areas to consider in how domain separation works in Surveys.

    Surveys in domain-separated instances

    The following domains are available by default after activating the Domain Support-Domain Extensions Installer [com.glide.domain.msp_extensions.installer] plugin. Only ServiceNow employees can activate this plugin.

    • Global
    • Acme
    • Cisco

    Access to surveys in domain-separated instances

    Based on the domain of the survey record and users, users can access the survey record and take the survey.

    Global domain users can access survey records in any domain. Users in any other domain can access records in their domain and Global domain. For example, users in the Acme domain can access records in the Acme domain and the Global domain.

    Global domain users can take a survey in any domain. Users in any other domain can take surveys in their domain as well as the Global domain. For example, users in Acme domain can take surveys in the Acme domain and the Global domain.

    Location of the survey record Users who can access and take the survey
    N/A Global Acme Cisco
    Global Yes Yes Yes
    Acme Yes Yes No
    Cisco Yes No Yes

    Any domain user can assign a survey in that domain to the same domain user or a Global domain user. For example, an Acme domain user can assign a survey to a Global domain user or an Acme domain user. Users from other domains are not visible to the Acme domain user.

    Although the Global domain user can view a survey from other domains, this user cannot assign the survey of one domain to a user from a different domain. For example, a Global domain user can assign a survey from the Acme domain to another Global domain user or an Acme domain user, but not to a Cisco domain user.

    Note:
    When a task is closed in a child domain and the assigned survey is either in the child domain or the global domain, the user from the child domain can then take the survey.

    Trigger conditions in domain-separated instances

    A Global domain user can create a triggered condition for a survey from any domain. The Global domain user can create an incident and trigger the survey by selecting a user from the other domain in the User field under Caller. However, the Global user cannot assign the survey to the user of different domain.

    A user can assign a trigger condition to a survey if the user belongs to the Global domain or the Survey domain.

    If there is no domain path for a trigger condition, users from any domain can view the trigger condition. For example, in the asmt_condition table that has no column for the domain path, users from the Acme domain can view the trigger condition created by the Cisco domain users.