Which are the available Domain Types on a baseline instance?
Choose 3 answers
Answer : B, C, D
In a baseline ServiceNow instance, the available domain types include Primary, TOP, and Customer. These domain types are part of the domain hierarchy that ServiceNow uses to organize data, processes, and administrative tasks within the platform.
* Primary: This is the main domain where the instance is initially set up. It's the starting point for the domain hierarchy and typically contains the core configurations and settings for the instance.
* TOP: The TOP domain is the highest level in the domain hierarchy, above all other domains. It is used for defining global processes and settings that can be inherited by lower-level domains.
* Customer: Customer domains are created to represent individual customers or tenants in a multi-tenancy environment. Each customer domain can have its own unique configurations, processes, and data that are separate from other domains.
The concept of MSP (Managed Service Provider) and Vendor domains are not standard domain types in a baseline instance but can be configured as part of a domain separation strategy to cater to specific business needs. The ServiceNow documentation provides detailed information on domain separation, including the types of domains and how they are used within the platform. Domain separation allows organizations to maintain data privacy and process customization across different business entities within a single instance of ServiceNow.
What is the best purpose of the TOP domain?
Answer : D
The TOP domain in ServiceNow's domain separation model serves as the core data domain and the parent domain for the mapping diagram. This is because the TOP domain is typically owned by the service provider and has control over all other sub-domains within the instance1. It is the highest level in the domain hierarchy and is responsible for the global rules, processes, and administrative tasks that affect all sub-domains1. The instance administration is given to the global and top domains, with the global domain setting the overarching rules and the top domain managing the specifics for each sub-domain1.
Domain separation in ServiceNow is a mechanism to separate data, processes, and administrative tasks into logical groupings called domains. This allows for control over several aspects of this separation, including absolute data segregation between business entities, customization of business process definitions, user interfaces for each domain, and maintenance of some global processes and global reporting within a single instance2.
In summary, the TOP domain's primary purpose is to act as the core data domain, providing a foundation for domain separation and ensuring that the service provider can effectively manage and control the entire domain structure within the ServiceNow instance.
A System Administrator wants to setup their domain hierarchy in a new instance, which practice should they follow when creating the structure?
Answer : A
Best practices for setting up a domain hierarchy in ServiceNow recommend creating a structure that is not too shallow or too deep. A hierarchy that is 3-5 layers deep is considered optimal as it allows for the use of 'contains' relationships where necessary12. This structure should include a default domain, which typically serves as the catch-all layer for any data that does not belong to a more specific domain3. The default domain is often the TOP domain or a domain just below it. This setup facilitates better organization and management of data and processes across different domains within the instance45.
Given a parent and child domain, explain data accessibility between domains.
Answer : B, D
In ServiceNow's domain separation model, data accessibility is designed to maintain the integrity and segregation of data across different domains. Here's how data accessibility works between parent and child domains:
* The parent users can access all child data: Users in a parent domain have visibility into the data of their child domains. This is because the parent domain is considered to have a higher level of data access privilege, allowing it to oversee and manage the data within its child domains1.
* The parent users can access all child data, but cannot access domains contained in the child domain: While parent domain users can access data in their immediate child domains, they cannot access data in ''grandchild'' domains or any domains that are further nested within a child domain. This maintains a level of data isolation and ensures that users only have access to the data they are permitted to view and manage1.
The options stating that both parent and child users can access each other's data (A) and that child users can access all parent data are incorrect. The domain separation model is hierarchical, not reciprocal, meaning that child domains do not have inherent access to parent domain data, and access between domains is not automatically bidirectional1.
For detailed information on domain separation and data accessibility, ServiceNow provides extensive documentation and best practices, which can be referenced for a deeper understanding of these concepts12
What is the mechanism for placing records in the Default domain?
Answer : B
In ServiceNow, the mechanism for placing records in the Default domain is primarily managed through the Domain Path. The Domain Path is a hierarchical structure that determines the domain in which a record resides. When a record is created, it is assigned a domain based on the domain path of the user or process creating the record. If no specific domain is assigned, the record defaults to the ''Default'' domain.
This mechanism ensures that records are correctly categorized and managed within the appropriate domain, maintaining the integrity of domain separation and data access controls.
For more detailed information, you can refer to the following resources:
* ServiceNow Domain Separation Documentation
* ServiceNow Knowledge Base Article
What is delegated administration?
Answer : C
Delegated administration in ServiceNow allows tasks and approvals to be temporarily handled by another user. This functionality is particularly useful in scenarios where the primary user is unavailable, ensuring that workflows and processes continue without interruption. It helps maintain efficiency and continuity in service management by allowing designated users to take over specific responsibilities temporarily.
* ServiceNow Product Documentation on Delegated Administration1
* ServiceNow Knowledge Base on Delegated Approvals and Tasks2
In a new domain separated instance, which data will a user in customer Domain X definitely have visibility to?
Choose 2 answers
Answer : C, E
In ServiceNow, domain separation is used to segregate data, processes, and administrative tasks into logical groupings called domains. This allows for control over data visibility and operations within an instance. When it comes to data visibility:
* Domain X: A user in Domain X will definitely have visibility to their own domain, as this is the primary context in which they operate1.
* Child domains of Domain X: Users can view data in their home domain (Domain X) and any child domains of that home domain. This is because child domains inherit permissions and visibility from their parent domains, allowing users in a parent domain to see data in the child domains1.
However, users do not have access to data present in their parent domains or other unrelated domains by default. The primary domain and default domain are typically reserved for global or top-level administrative purposes and are not automatically visible to users in customer domains unless specific permissions are granted12.
It's important to configure domain separation carefully to ensure that users have the appropriate level of access to data necessary for their roles while maintaining the security and integrity of the data across the instance31.