---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Domain Visibility AI agent

# Domain Visibility AI agent {#ariaid-title1}

Release version: Brazil  
Updated October 16, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
The Domain Visibility AI agent enables Domain Admins to manage user domain visibility using guided, conversational workflows in the ServiceNow Otto® panel.

## Domain Separation AI agent overview {#domain-sep-aia-new__section_e2h_ck3_bjc}

The agent performs validated operations on domain visibility data without requiring direct access to domain visibility tables.  
Once enabled, the Domain Visibility agent exposes the following options to the admin:

* List all domain visibility for a user
* Add domain visibility for a user
* Remove domain visibility from a user
{#domain-sep-aia-new__ul_u5w_fk3_bjc}  
Note:  
The agent interacts directly with the `sys_user_visibility` table. All domain visibility operations (add, remove, list, query) are executed through this table. Admins do not need to open or configure the table manually.

## Prerequisites and setup {#domain-sep-aia-new__section_bgv_gnq_53c}

Ensure the following requirements are met before using the AI agent:

* The Domain Separation plugin is installed on your instance and active. For more information, refer to [Domain separation plugin](https://www.servicenow.com/docs/access?context=domain-sep-plugin&version=brazil&pubname=brazil-platform-security&ft:locale=en-US).
* AI capabilities are enabled on the instance.
* You are signed in with a Domain Admin role.
{#domain-sep-aia-new__ul_o5d_3nq_53c}

## Role filtering {#domain-sep-aia-new__section_llr_kk3_bjc}

Required role: Domain Admin.

AI agents use [role masking](https://www.servicenow.com/docs/iVyTaqmQoRgcYyPxVs0o1w "Role masking for AI agents and agentic workflows helps users enhance security by enabling them to limit their roles during tool execution and verify that AI agents run with least-access privileges.") to determine which users can access them. Ones installed with your applications have specific roles that come included with the application. If you select Users with specific roles for user access, you must configure the security controls to include these roles. For the instructions to change the security controls, see [Define security controls for an AI agent](https://www.servicenow.com/docs/~WP3EICzjCWt4v5PXicD3A "In the guided setup for an AI agent, define security controls for who can access the AI agent and what data the AI agent has access to.").

In the data access settings, you must also add the necessary roles to enable reading of the tables for the records you want to evaluate for readiness. For example, you can add the itil role to the AI agent's list of approved
roles so that it can access Incident records.

## Accessing the Domain Visibility AI agent {#domain-sep-aia-new__section_x3k_vmz_1hc}

To access the AI agent:

1. Navigate to AllAI Agent StudioCreate and manage.
2. Go to the AI Agents tab.
3. Select Domain Visibility.
{#domain-sep-aia-new__ol_y3k_vmz_1hc}

## Start a conversation with an AI agent {#domain-sep-aia-new__section_wrd_4rq_53c}

1. Open the ServiceNow Otto panel.
2. Start a new interaction.
3. Enter the prompt, "domain visibility help."

{#domain-sep-aia-new__ol_ff5_prq_53c}

The agent displays the available domain visibility operations and guides you through the selected task.

## List all domain visibility for a user {#domain-sep-aia-new__ListDomain}

Use this operation to view all domains a user can access.

1. Select List domain visibility from the agent's options.
2. Provide the name of the user whose domain visibility you want to view.

{#domain-sep-aia-new__ol_ot1_lby_v3c}

The agent retrieves all domain visibility entries associated with the user.

## Add domain visibility for a user {#domain-sep-aia-new__section_fb5_rrq_53c}

Use this operation to grant a user visibility to a specific domain.

1. Select Add domain visibility from the agent's available options.
2. Provide the requested inputs:
   * User name
   * Domain name
3. The agent validates that the specified user and domain exist.
4. Confirm the user name and the domain name, and confirm that you want to add visibility for the user.

The agent adds visibility for the specified domain to the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

## Remove domain visibility from a user {#domain-sep-aia-new__RemoveDomain}

Use this operation to revoke a user's visibility to a specific domain.

1. Select **Remove domain visibility** from the agent's available options.
2. Provide the requested inputs:
   * User name
   * Domain name
3. The agent validates that the specified user and domain exist and that the user currently has visibility to the specified domain.If no matching visibility exists, the agent reports that there is nothing to
   remove.

4. If visibility does exist, confirm the user name and domain name and that you want to remove the visibility for the user.

The agent removes visibility for the specified domain from the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

*[\>]: and then