---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Domain Separation AI agent

# Domain Separation AI agent {#ariaid-title1}

Release version: Australia  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Domain Separation AI agent

The Domain Visibility AI agent empowers Domain Admins to efficiently manage user domain visibility through guided, conversational workflows within the ServiceNow Otto® panel.
It performs validated operations on domain visibility data by interacting directly with thesysuservisibilitytable, eliminating the need for admins to manually access or configure this table.
Show full answer Show less  

## Key Features

* **List domain visibility for a user:** View all domains a specific user can access.
* **Add domain visibility for a user:** Grant a user access to a specific domain after validating the user and domain existence.
* **Remove domain visibility from a user:** Revoke a user's access to a domain, with validation to ensure the visibility exists before removal.

## Prerequisites and Setup

* The **Domain Separation plugin** must be installed and active on your instance.
* **AI capabilities** must be enabled in your ServiceNow environment.
* You must have the **Domain Admin role** to use the agent.
* Appropriate role masking and security controls need to be configured to allow access to the AI agent and relevant tables.

## Accessing and Using the AI Agent

To use the Domain Visibility AI agent:

* Navigate to **All \> AI Agent Studio \> Create and manage** and select the **Domain Visibility** agent.
* Alternatively, open the **ServiceNow Otto panel** , start a new interaction, and enter the prompt "**domain visibility help**" to receive guided assistance.

## Practical Application

Admins can perform domain visibility management tasks quickly and securely without manual table edits. The agent ensures that all operations are validated and logged through the **sysuservisibility** table, providing transparency and control over domain access assignments.  
The Domain Visibility AI agent enables Domain Admins to manage user domain visibility using guided, conversational workflows in the ServiceNow Otto® panel.

## Domain Separation AI agent overview {#domain-sep-aia__section_e2h_ck3_bjc}

The agent performs validated operations on domain visibility data without requiring direct access to domain visibility tables.  
Once enabled, the Domain Visibility agent exposes the following options to the admin:

* List all domain visibility for a user
* Add domain visibility for a user
* Remove domain visibility from a user
{#domain-sep-aia__ul_u5w_fk3_bjc}  
Note:  
The agent interacts directly with the `sys_user_visibility` table. All domain visibility operations (add, remove, list, query) are executed through this table. Admins do not need to open or configure the table manually.

## Prerequisites and setup {#domain-sep-aia__section_bgv_gnq_53c}

Ensure the following requirements are met before using the AI agent:

* The Domain Separation plugin is installed on your instance and active. For more information, refer to [Domain separation plugin](https://www.servicenow.com/docs/access?context=domain-sep-plugin&version=australia&pubname=australia-platform-security&ft:locale=en-US).
* AI capabilities are enabled on the instance.
* You are signed in with a Domain Admin role.
{#domain-sep-aia__ul_o5d_3nq_53c}

## Role masking {#domain-sep-aia__section_llr_kk3_bjc}

Required role: Domain Admin.

AI agents use [role masking](https://www.servicenow.com/docs/4632C_BpTXjste_glQl_fg "Implement security in AI Agent Studio through access control lists (ACLs), user identities, and role filtering.") to determine which users can access them. Ones installed with your applications have specific roles that come included with the application. If you select
Users with specific roles for user access, you must configure the security controls to include these roles. For the instructions to change the security controls, see [Define security controls for an AI agent](https://www.servicenow.com/docs/SGciUCFmTP77qs2F6Qv4ig "In the guided setup for an AI agent, define security controls for who can access the AI agent and what data the AI agent has access to.").

In the data access settings, you must also add the necessary roles to enable reading of the tables for the records you want to evaluate for readiness. For example, you can add the itil role to the AI agent's list of approved
roles so that it can access Incident records.

## Accessing the Issue Readiness AI agent {#domain-sep-aia__section_x3k_vmz_1hc}

To access the AI agent:

1. Navigate to AllAI Agent StudioCreate and manage.
2. Go to the AI Agents tab.
3. Select Domain Visibility.
{#domain-sep-aia__ol_y3k_vmz_1hc}

## Access the AI agent {#domain-sep-aia__section_wrd_4rq_53c}

1. Open the ServiceNow Otto panel.
2. Start a new interaction.
3. Enter the prompt, "domain visibility help."

{#domain-sep-aia__ol_ff5_prq_53c}

The agent displays the available domain visibility operations and guides you through the selected task.

## List all domain visibility for a user {#domain-sep-aia__ListDomain}

Use this operation to view all domains a user can access.

1. Select List domain visibility from the agent's options.
2. Provide the name of the user whose domain visibility you want to view.

{#domain-sep-aia__ol_ot1_lby_v3c}

The agent retrieves all domain visibility entries associated with the user.

## Add domain visibility for a user {#domain-sep-aia__section_fb5_rrq_53c}

Use this operation to grant a user visibility to a specific domain.

1. Select Add domain visibility from the agent's available options.
2. Provide the requested inputs:
   * User name
   * Domain name
3. The agent validates that the specified user and domain exist.
4. Confirm the user name and domain name and that you want to add the visibility for the user.

The agent adds visibility for the specified domain to the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

## Remove domain visibility from a user {#domain-sep-aia__RemoveDomain}

Use this operation to revoke a user's visibility to a specific domain.

1. Select **Remove domain visibility** from the agent's available options.
2. Provide the requested inputs:
   * **User name**
   * **Domain name**
3. The agent validates that the specified user and domain exist and that the user currently has visibility to the specified domain.If no matching visibility exists, the agent reports that there is nothing to
   remove.

4. If visibility does exist, confirm the user name and domain name and that you want to remove the visibility for the user.

The agent removes visibility for the specified domain from the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

*[\>]: and then