--- sourceDocument: Australia Enable AI sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences Release : - australia ft:locale : - en-US ft:publication_title : - Australia Enable AI ft:clusterId : - platai bundleId : - platai workflow : - Platform --- # Domain separation and Generative AI Controller # Domain separation and Generative AI Controller {#ariaid-title1} Release version: Australia Updated June 19, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Domain separation and Generative AI Controller Domain separation is supported in the Generative AI Controller, allowing ServiceNow customers to logically partition data, processes, and administrative tasks into distinct domains. This enables controlled access where users in one domain cannot access data or capabilities of another domain. Generative AI Controller leverages domain separation for OneExtend capabilities, which are foundational components for generative AI features across the ServiceNow AI Platform. Show full answer Show less ## Key Features * **Domain-aware application properties and business logic:** Allows customization and configuration per tenant or domain, ensuring processes and data are segregated properly for multiple service provider customers within a single instance. * **Domain separation at the OneExtend capability level:** Records related to execution, configuration, and logs are isolated by domain, including those accessible by ServiceNow personnel. * **Capability duplication across domains:** Customers can create copies of existing generative AI capabilities in new domains by creating records in the *OneExtend Capabilities (sysoneextendcapability)* table, setting the domain upon record creation based on the current domain context. * **Configuration requirements for new domain capabilities:** After creating a capability record in a new domain, corresponding *OneExtend Capability Attribute* , *OneExtend Capability Definition* , and *OneExtend Definition Config* records must be created with values matching the intended capability to ensure proper function and avoid unexpected behaviors. ## Key Outcomes * Enables segregation of generative AI configurations so different domains can use distinct large language model (LLM) providers or settings, facilitating tailored AI experiences per domain. * Supports multi-tenant environments by isolating data and administrative controls, improving security and governance for service providers managing multiple customers within a single instance. * Provides a structured approach to replicating and customizing AI capabilities across domains, ensuring consistency and control over AI feature deployments. Domain separation is supported for Generative AI Controller. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data. ## Support level: Standard {#domain-separation-and-generative-ai-controller__section_vjg_b2n_g1c} * Includes all aspects of Basic level support. * Application properties are domain-aware as needed. * Business logic: The service provider (SP) creates or modifies processes per customer. The use cases reflect proper use of the application by multiple SP customers in a single instance. * The instance owner must configure the minimum viable product (MVP) business logic and data parameters per tenant as expected for the specific application. {#domain-separation-and-generative-ai-controller__ul_tfh_drj_xkb} Sample use case: An admin must be able to make comments required when a record closes for one tenant, but not for another.{#domain-separation-and-generative-ai-controller__p_ssc_nfg_h1c} For more information on support levels, see [Application support for domain separation](https://www.servicenow.com/docs/access?context=domain-separated-apps&version=australia&pubname=australia-platform-security&ft:locale=en-US).{#domain-separation-and-generative-ai-controller__p_tsc_nfg_h1c} Domain separation enables you to create partitions in the application data and administrative processes. Because the generative AI tables are domain separated, Generative AI Controller supports domain separation for OneExtend capabilities. The capabilities are the basic building blocks for generative AI features across the ServiceNow AI Platform. With domain separation, you can isolate the data and control access so that users in one domain don't have access to the capabilities of another domain. ## How domain separation works in Generative AI Controller {#domain-separation-and-generative-ai-controller__section_wbl_b2n_g1c} Domain separation is possible at the generative AI OneExtend capability level. Records that are related to the execution and configuration of OneExtend capabilities, such as log tables that are accessible to ServiceNow personnel, are also separated according to the capability's domain. If you want to create a copy of an existing generative AI capability in a different domain, you must create a record in the OneExtend Capabilities (sys_one_extend_capability) table. For more information about the OneExtend Capabilities table, see [Reference for Generative AI Controller](https://www.servicenow.com/docs/alE14QZ3DDjh6e76qfDG~Q "Reference topics provide information about Generative AI Controller tables, and properties."). You set the domain when the record is created. The domain is based on the domain that you're in at the time that you create the record. When you're creating a capability record, you can use an existing OneExtend Capability record as a blueprint to help confirm that the capability works as intended. After you create the OneExtend Capability record, you must create records for the following attribute and config records in the new domain: * OneExtend Capability Attribute records with the same values as the capability in the global domain. * A OneExtend Capability Definition that corresponds to the new capability. * A OneExtend Definition Config definition record that includes the OneExtend Capability Definition for the new domain. Note: The OneExtend Capability Definition record that you add must be the same as the capability that you want in the new domain. For example, if you're creating a capability in a new domain for an Amazon Bedrock integration, you could add the corresponding Amazon Bedrock Capability Definition record. Adding a different capability definition than the one you intend could result in unexpected behavior. The OneExtend Definition Config record that you select should include the OneExtend Capability Definition record that you added. ## Use cases {#domain-separation-and-generative-ai-controller__section_xbl_b2n_g1c} With domain-separated capabilities, you can isolate generative AI configurations so that different domains use different LLM providers or settings. **Related topics** * [Domain separation for service providers](https://www.servicenow.com/docs/access?context=domain-sep-landing-page&version=australia&pubname=australia-platform-security&ft:locale=en-US)