--- sourceDocument: Zurich Employee Service Management sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/employee-service-management Release : - zurich ft:locale : - en-US ft:publication_title : - Zurich Employee Service Management ft:clusterId : - emplsm bundleId : - emplsm workflow : - Employee --- # Domain separation for Safe Workplace # Domain separation and Safe Workplace suite {#ariaid-title1} Release version: Zurich Updated July 31, 2025 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Domain separation and Safe Workplace suite The Safe Workplace suite in ServiceNow supports domain separation at the Basic level for most applications, except the Safe Workplace Dashboard. Domain separation enables you to partition data, processes, and administrative tasks into distinct logical domains, controlling user visibility and data access per domain. This capability is essential for organizations managing multiple tenants or groups to ensure data security and operational isolation. Show full answer Show less ## Domain Separation Support Levels * **Basic:** Data is separated by domain with logic for correct data routing, caching, rollups, and aggregations. Global configuration works across tenants. * **Standard:** Application properties are domain-aware, and business logic can be separated by tenant as configured by the instance owner. * **Enhanced:** Tenants can configure domain-specific business logic through the UI, enabling safer customization without affecting others. ## Safe Workplace Applications and Domain Separation Applications using the Safe Workplace domain table include Contact Tracing, Health and Safety Testing, Emergency Outreach, and Emergency Exposure Management. Administrators must install the Domain Separation plugin to work with these tables, many of which include a `sysdomain` field to enable data partitioning. ## Core Tables and Scheduled Jobs * **Core Domain Table:** `snimtcoredomain` manages domains used by scheduled jobs. * **Property Table:** `snimtcoreproperty` extends system properties with domain-awareness, allowing property values to be overridden per domain. * Scheduled jobs run separately within each domain, using the core domain table as the source, with the Domain Iterator option enabled by default to allow multi-domain execution. ## Important Considerations * Parent-child domain structures are not supported to avoid duplicate processing by scheduled jobs. * Some application tables do not have domain separation enabled (`sysdomain` field missing), indicating no data partitioning for those tables. ## Working with Domain-Separated Properties After installing the Domain Separation plugin, domain-separated properties in Safe Workplace applications do not display by default. To manage them: * Create new overrides for properties per domain via the Properties page. * Use specific prefixes (e.g., `snimtcore`, `snimtdiagnosis`) to filter properties relevant to each Safe Workplace application. * Property overrides allow tailored configuration per domain while maintaining centralized control. ## Practical Benefits for ServiceNow Customers * Enables secure multi-tenant or multi-group data and process segregation within Safe Workplace applications. * Supports compliance and privacy requirements by isolating sensitive workplace safety data per domain. * Allows domain-specific customization of application properties and business logic without impacting other domains. * Facilitates efficient administration with domain-aware scheduled jobs and property management. The Safe Workplace suite applications support domain separation at the Basic level with the exception of Safe Workplace Dashboard. With domain separation, you can separate data, processes, and administrative tasks into logical groupings called domains. You can then control aspects in each domain, including what users can see or whether they can access the data. ## Domain separation support {#domain-separation-safe-workplace__section_kpp_445_rlb} ServiceNow applications that support domain separation might support the separation of data and data routing only, have advanced business logic separation, or support customer-level administration of the application. ServiceNow applications are defined with incremental support levels from the perspective of actual use cases and the people who use them. * Basic * Data is domain-separated. * Logic exists to ensure proper data routing, caching, rollups, and aggregations. * Global configuration is operational for multiple tenants {#domain-separation-safe-workplace__ul_pfj_c4v_nsb} * Standard * Application properties are domain-aware as needed. * Business logic can be domain-separated by the instance owner per tenant. {#domain-separation-safe-workplace__ul_rjg_24v_nsb} * Enhanced: Data-driven process enables failsafe configuration by tenants through the UI to drive business logic. {#domain-separation-safe-workplace__ul_y2g_b4v_nsb} For more detail on the support levels, see [Application support for domain separation](https://www.servicenow.com/docs/access?context=domain-separated-apps&version=zurich&pubname=zurich-platform-security&ft:locale=en-US). ## How domain separation works in Safe Workplace applications {#domain-separation-safe-workplace__section_d3g_fhj_34b} The following applications use the Safe Workplace domain table: * Contact Tracing * Health and Safety Testing * Emergency Outreach (Daily Contact Logs, Privacy Consent, and Privacy Consent (common)) * Emergency Exposure Management {#domain-separation-safe-workplace__ul_p4l_1gj_34b} Admins must install the [Domain separation plugin](https://www.servicenow.com/docs/access?context=t_ActivateDomainSeparation&version=zurich&pubname=zurich-platform-security&ft:locale=en-US)before working with these application tables. Most of those tables contain a sys_domain field so they are able to be domain-separated if they have data that needs to be partitioned by domain. * Core domain table: Included in the [Safe Workplace plugin](https://www.servicenow.com/docs/89F6eltiAl9Ley7V9FIH5A "ServiceNow Safe Workplace applications help you reopen your workplaces and support the health and safety of your employees after emergencies and pandemics like COVID-19.") is an sn_imt_core_domain table. Domains in this table are iterated when scheduled jobs run. * Property table: The sn_imt_core_property table extends the sys_properties table and adds a sys_domain field. Adding that field allows sys_properties values to be overridden for a domain. {#domain-separation-safe-workplace__ul_d34_12p_p4b} Note: Values are handled differently for `password2` fields than for other property types. Therefore, the value displays as blank in the domain-separated properties list view. The following tables do not have the sys_domain field: * app-imt-checkin * sn_imt_checkin_outreach_sysauto_script (extends sysauto_script) * sn_imt_checkin_response_criteria * sn_imt_checkin_response_option_for_health * sn_imt_checkin_response_option_survey * sn_imt_checkin_response_script {#domain-separation-safe-workplace__ul_mml_sx4_p4b} * app-imt-diagnosis: task_compliance_result * app-imt-tracing * sn_imt_tracing_wifi_access_register_job * sn_imt_tracing_wifi_access_register_stage {#domain-separation-safe-workplace__ul_rng_1y4_p4b} * app-imt-core: sn_imt_core_sysauto_script (extends sysauto_script) {#domain-separation-safe-workplace__ul_e55_s21_q4b} Scheduled jobs in applications with this level of domain separation run separately for each domain in the table. Scheduled jobs use the core table as the domain source table, and the Domain Iterator check box is automatically enabled by default when domain separation is installed. When the Domain Iterator option is enabled, the job can run in multiple domains. The Domain Source Table value is also set to Safe Workplace Domains by default. If you don't see the tables, verify that the Domain Iterator and Safe Workplace Domains settings are selected, and refresh the instance.Figure 1. Domain iterator option selected in the Employee Readiness Core Scheduled Script Execution form ## Parent-child domains {#domain-separation-safe-workplace__section_dph_gz4_p4b} Domains that also contain a sub-domain or "child" domain are not supported in these applications. Running a job in a parent domain that has a child would mean running the job twice and thus processing the data more than once. You could add a parent domain or add just the child domain but not both. ## Working with domain-separated properties in the Safe Workplace Suite {#domain-separation-safe-workplace__section_myl_t5k_l4b} When the Domain separation plugin is installed and you navigate to the Properties page in any of the four Safe Workplace domain-separated applications, their properties do not display by default. You must override properties for a domain before they appear in the list.Figure 2. Domain-separated properties list with no properties displaying To display the properties, click New on the Properties page. In the form that creates a new domain-separated property, search in the reference field for the property you would like to override. Enter a specific prefix to narrow your search: * `sn_imt_core` for Employee Readiness Core * `sn_imt_diagnosis` for Emergency Exposure Management * `sn_imt_health_testing` for Health and Safety Testing * `sn_imt_tracing` for Contact Tracing {#domain-separation-safe-workplace__ul_hf1_hwk_l4b} Figure 3. Entering a prefix in the Property field to narrow the search The properties display with a full description of the overrides. Figure 4. System Properties list showing the property overrides After you create your domain-separated property override, the form displays the domain-separated properties.Figure 5. List showing the domain-separated properties You can navigate back to the record form by selecting a property name in the list. ## Property functions {#domain-separation-safe-workplace__section_ncp_3v4_p4b} Learn more about how these properties function in the following topics: * [Health and Safety Testing properties](https://www.servicenow.com/docs/QII_dyY~yvX92pu4IMIaVA#configure-health-safety-testing "Complete all configuration tasks to ensure that Health and Safety Testing is set up correctly for your company.") * [Contact Tracing properties](https://www.servicenow.com/docs/QHnKfWHLBE2JNdVz9K~QDg "Configure system properties to adjust how contact tracing data is used.") * [System properties for tracing systems in Emergency Exposure Management](https://www.servicenow.com/docs/vTF76xXR~9jQYIJA4aJJUQ "System properties associated with tracing systems that are available in the Emergency Exposure Management application.") * [Employee Health and Safety Status properties](https://www.servicenow.com/docs/39yFmEZSuZnM7NndtOrrbA "Set up Employee Health and Safety Status properties to configure the email notifications that are sent to visitors.") {#domain-separation-safe-workplace__ul_vyz_tv4_p4b} **Related topics** * [Domain separation for service providers](https://www.servicenow.com/docs/access?context=domain-sep-landing-page&version=zurich&pubname=zurich-platform-security&ft:locale=en-US)