---
sourceDocument: Australia Strategic Portfolio Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-business-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Strategic Portfolio Management

ft:clusterId :

    - itbm

bundleId :

    - itbm

workflow :

    - Technology


---

# Configure

# Configuring SPM
Enterprise-Wide Deployment {#ariaid-title1}

Release version: Australia  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Configuring SPM Enterprise-Wide Deployment

Configuring Enterprise-Wide Deployment (EWD) in ServiceNow Strategic Portfolio Management (SPM) enables function-level data separation through partitions.
This setup involves creating partitions, defining criteria for supported tables, and assigning partition roles to control user access.
EWD ensures that users only see data relevant to their roles and partitions, enhancing security and organizational data governance.
Show full answer Show less  

## Key Configuration Steps

* **Create Partition Records:** Define partitions by creating records and assigning a new or existing role to each partition.
* **Define Partition Criteria:** Set partition criteria on supported tables to enforce data separation, ensuring all partitions on a table use the same reference column (e.g., Department for the Project table).
* **Assign Partition Roles:** Allocate the partition roles to users or user groups who require access to the partitioned data.
* **Update Existing Records:** Run a scheduled job to update partition details on historical records across project, demand, program, portfolio, and planning item tables.
* **Enable Extended Security (Optional):** Install Extended Security for Enterprise-Wide Deployment to extend partition controls across APIs, workflows, indirect references, and unpartitioned parent tables.
* **Map Dashboards (Optional):** Assign dashboards to partitions for tailored user experiences such as Demand Management.
* **Apply Changes During Maintenance:** Implement partition configuration changes and role assignments during a maintenance window to ensure proper record visibility updates.

## Important Considerations

* Only users with the EWD admin role (\[snspmewd.ewdadmin\]) can configure EWD.
* The chosen reference column for partition criteria is fixed and becomes read-only after configuration; plan partition structures carefully before implementation.
* Partitions must consistently use the same reference column on a given table to maintain proper data separation.
* Supported tables include Project, Demand, Program, Portfolio, and their related sub-entities, which inherit partition values automatically.
* Partition enforcement requires specific minimum versions of supported workspaces, including Project Workspace (7.3.0), Portfolio Planning Workspace (8.15.0), Strategic Planning Workspace (4.15.0), and Resource Management Workspace (5.7.0).

## Benefits for ServiceNow Customers

By implementing EWD, ServiceNow customers can achieve robust data separation aligned with organizational functions or departments, enhancing security and compliance. The configuration supports granular access control, enables historical data partitioning, and integrates with core SPM workspaces to maintain consistent user experiences. Extended security options further protect data across integrations and workflows.  
Configuring Enterprise-Wide Deployment (EWD) involves creating partitions, defining partition criteria for supported tables, and assigning partition roles to users or user groups to enforce function-level data
separation.

## High-level configuration process {#configure-ewd__section_config_process}

EWD configuration is an administrative activity that requires planning before implementation. To achieve data separation with EWD, complete the following steps in order:

1. Create a partition record with assigning a new or existing role to it. For details, see [Create and configure a partition](https://www.servicenow.com/docs/9OVKfJ0_6~5TJ~KxmfzxIA "Create a partition to control record visibility for users within a specific function, such as a department or business unit.").
2. Configure partition criteria for each supported table that you want to define data partitioning for that partition. For details, see [Assign partition role for access to the partition](https://www.servicenow.com/docs/G16OXmkMBigNPOCNHRsyzw "Assign a partition role to users or user groups to grant them access to records within a specific partition.").
3. Assign the partition role associated with the partition record to the users or user groups who should have access to those partitioned tables. For details, see [Verify partition configuration](https://www.servicenow.com/docs/bU85nFRZaeNuySacRShRBA "Verify that partitions are configured correctly by impersonating users with different partition roles and checking that record visibility is enforced across all workspaces.").

   Repeat this process for each function partition you need to create. For example, create separate partitions for IT Operations and HR Learning and Development.
4. Update the existing records in the project, demand, programs, portfolios, and planning item tables with partition details by running the scheduled job. For details, see [Update partition details for existing records](https://www.servicenow.com/docs/nT6Ey~89t4jDLemYwJTp4Q "Update existing records in the project, demand, programs, portfolios, and planning item tables with partition details by running the Update existing records with partition details scheduled job.").
5. Enable the additional security that extends partition access controls across APIs, agentic workflows, indirect references, and unpartitioned parent tables. This configuration requires installation of Extended Security for Enterprise-Wide Deployment. For details, see [Enable additional security for partitions](https://www.servicenow.com/docs/0KKA4giiZgJ07LnMmmqEow "Enable additional ACL enforcement for partitioned tables to strengthen access control validation. Select the tables where you want to apply enhanced security.").
6. Optional: Map a dashboard to each partition for an experience, such as Demand Management. For details, see [Map a dashboard to a partition](https://www.servicenow.com/docs/OdCjYm7usvzoDCvXVHsjWw "Give a partition its own dashboard for an experience, such as Demand Management, so that users who select the partition see the dashboard mapped to it.").

Important:  
Apply partition configuration changes and role assignments during a maintenance window when users are not accessing the instance, to ensure record visibility updates take effect correctly.

## Partition configuration checklist {#configure-ewd__section_prereqs}

Before configuring Enterprise-Wide Deployment, ensure the following are in place:

* The EWD admin \[sn_spm_ewd.ewd_admin\] role assigned to you.
* The reference column to use as the partition criteria field is identified. All partitions on the same table must use the same reference column --- for example, Department for all partitions on the Project table.
* The users or user groups that should have access to each partition are identified.
* A plan for handling existing records is in place. After configuring partitions, run the Update existing records with partition details scheduled job to populate partition values on historical records.

Important:  
Once partition criteria is configured for a table, the criteria field becomes read-only and cannot be changed for subsequent partitions on that table. Plan your partition structure accordingly before creating partitions.

## Supported tables for partition criteria {#configure-ewd__section_supported_tables}

Partition criteria can be configured for the following core tables:

* Project \[pm_project\]
* Demand \[dmn_demand\]
* Program \[pm_program\]
* Portfolio \[pm_portfolio\]

Related records and sub-entities for these tables automatically inherit the partition value from the parent record. For a full list of tables in scope, see [Supported tables for partition](https://www.servicenow.com/docs/xSUbN9ilEuJYpcQOF9yCEg "Several tables are supported for partition using Enterprise-Wide Deployment, including direct and indirect related tables for each entity.").

## Supported workspace versions {#configure-ewd__supported-workspace-versions}

Partition enforcement is supported in the following workspaces. For partition enforcement to function in a workspace, that workspace must be installed at the specified minimum version:

* Project Workspace (7.3.0)
* Portfolio Planning Workspace (8.15.0)
* Strategic Planning Workspace (4.15.0)
* Resource Management Workspace (5.7.0)