---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Domain Separation AI agent

# Domain Separation AI agent {#ariaid-title1}

Release version: Australia  
Updated September 2, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Domain Separation AI agent

The Domain Visibility AI agent empowers Domain Admins in ServiceNow to manage user domain visibility efficiently using guided, conversational workflows within the ServiceNow Otto® panel.
This agent performs validated domain visibility operations---such as adding, removing, and listing domain visibility for users---by interacting directly and securely with thesysuservisibilitytable, eliminating the need for manual table access or configuration.
Show full answer Show less  

## Prerequisites and Setup

* The **Domain Separation plugin** must be installed and active on your ServiceNow instance.
* **AI capabilities** need to be enabled on the instance.
* You must be signed in with the **Domain Admin role**, as the agent uses role masking to control access.
* Security controls should be configured to include necessary roles if restricting AI agent access by roles.
* Data access settings must permit the AI agent to read relevant tables by assigning appropriate roles.

## Accessing and Using the Domain Visibility AI agent

To access the agent:

* Navigate to **All \> AI Agent Studio \> Create and manage** , then select the **Domain Visibility** AI agent.
* Alternatively, open the ServiceNow Otto panel, start a new interaction, and enter the prompt *"domain visibility help"*.

The agent presents available operations and guides you through:

* **Listing all domain visibility for a user:** View all domains accessible to a specified user.
* **Adding domain visibility for a user:** Grant a user access to a specific domain after validating user and domain existence.
* **Removing domain visibility from a user:** Revoke a user's access to a specific domain, with validation to confirm current visibility before removal.

## Practical Benefits for ServiceNow Customers

This AI agent streamlines domain visibility management by providing a secure, easy-to-use conversational interface that reduces manual table management and potential errors. It enables Domain Admins to quickly perform visibility operations while ensuring data integrity and compliance with domain separation policies. Verification of changes can be done through the **sysuservisibility** table, maintaining transparency and auditability.  
The Domain Visibility AI agent enables Domain Admins to manage user domain visibility using guided, conversational workflows in the ServiceNow Otto® panel.

## Domain Separation AI agent overview {#domain-sep-aia__section_e2h_ck3_bjc}

The agent performs validated operations on domain visibility data without requiring direct access to domain visibility tables.  
Once enabled, the Domain Visibility agent exposes the following options to the admin:

* List all domain visibility for a user
* Add domain visibility for a user
* Remove domain visibility from a user
{#domain-sep-aia__ul_u5w_fk3_bjc}  
Note:  
The agent interacts directly with the `sys_user_visibility` table. All domain visibility operations (add, remove, list, query) are executed through this table. Admins do not need to open or configure the table manually.

## Prerequisites and setup {#domain-sep-aia__section_bgv_gnq_53c}

Ensure the following requirements are met before using the AI agent:

* The Domain Separation plugin is installed on your instance and active. For more information, refer to [Domain separation plugin](https://www.servicenow.com/docs/access?context=domain-sep-plugin&version=australia&pubname=australia-platform-security&ft:locale=en-US).
* AI capabilities are enabled on the instance.
* You are signed in with a Domain Admin role.
{#domain-sep-aia__ul_o5d_3nq_53c}

## Role masking {#domain-sep-aia__section_llr_kk3_bjc}

Required role: Domain Admin.

AI agents use [role masking](https://www.servicenow.com/docs/zYD_mMqSIHlofdszXVeGhw "Role masking for AI agents and agentic workflows helps users enhance security by enabling them to limit their roles during tool execution and verify that AI agents run with least-access privileges.") to determine which users can access them. Ones installed with your applications have specific roles that come included with the application. If you select Users with specific roles for user access, you must configure the security controls to include these roles. For the instructions to change the security controls, see [Define security controls for an AI agent](https://www.servicenow.com/docs/SGciUCFmTP77qs2F6Qv4ig "In the guided setup for an AI agent, define security controls for who can access the AI agent and what data the AI agent has access to.").

In the data access settings, you must also add the necessary roles to enable reading of the tables for the records you want to evaluate for readiness. For example, you can add the itil role to the AI agent's list of approved
roles so that it can access Incident records.

## Accessing the Issue Readiness AI agent {#domain-sep-aia__section_x3k_vmz_1hc}

To access the AI agent:

1. Navigate to AllAI Agent StudioCreate and manage.
2. Go to the AI Agents tab.
3. Select Domain Visibility.
{#domain-sep-aia__ol_y3k_vmz_1hc}

## Access the AI agent {#domain-sep-aia__section_wrd_4rq_53c}

1. Open the ServiceNow Otto panel.
2. Start a new interaction.
3. Enter the prompt, "domain visibility help."

{#domain-sep-aia__ol_ff5_prq_53c}

The agent displays the available domain visibility operations and guides you through the selected task.

## List all domain visibility for a user {#domain-sep-aia__ListDomain}

Use this operation to view all domains a user can access.

1. Select List domain visibility from the agent's options.
2. Provide the name of the user whose domain visibility you want to view.

{#domain-sep-aia__ol_ot1_lby_v3c}

The agent retrieves all domain visibility entries associated with the user.

## Add domain visibility for a user {#domain-sep-aia__section_fb5_rrq_53c}

Use this operation to grant a user visibility to a specific domain.

1. Select Add domain visibility from the agent's available options.
2. Provide the requested inputs:
   * User name
   * Domain name
3. The agent validates that the specified user and domain exist.
4. Confirm the user name and domain name and that you want to add the visibility for the user.

The agent adds visibility for the specified domain to the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

## Remove domain visibility from a user {#domain-sep-aia__RemoveDomain}

Use this operation to revoke a user's visibility to a specific domain.

1. Select **Remove domain visibility** from the agent's available options.
2. Provide the requested inputs:
   * **User name**
   * **Domain name**
3. The agent validates that the specified user and domain exist and that the user currently has visibility to the specified domain.If no matching visibility exists, the agent reports that there is nothing to
   remove.

4. If visibility does exist, confirm the user name and domain name and that you want to remove the visibility for the user.

The agent removes visibility for the specified domain from the specified user.  
Note:  
You can verify this by checking the `sys_user_visibility` table.

*[\>]: and then