Configuring SPM Enterprise-Wide Deployment
Summarize
Summary of Configuring SPM Enterprise-Wide Deployment
Configuring Enterprise-Wide Deployment (EWD) in Strategic Portfolio Management (SPM) enables function-level data separation by creating partitions, defining partition criteria on supported tables, and assigning partition roles to users or groups. This feature helps enforce controlled access to data across different organizational functions, improving data security and governance.
Show less
Key Features
- Partition Records: Create partitions and assign roles to them, which control access to specific segments of data.
- Partition Criteria: Define criteria fields for tables such as Project, Demand, Program, and Portfolio to enforce partitioning. All partitions on the same table must use the same criteria field.
- Role Assignment: Assign partition roles to users or user groups to grant access to partitioned data.
- Historical Data Update: Run a scheduled job to update existing records with partition details ensuring consistent data separation across legacy data.
- Supported Tables and Workspaces: Partitioning is supported on key SPM tables (Project, Demand, Program, Portfolio) and enforced in specific workspace versions including Project Workspace (7.3.0+), Portfolio Planning Workspace (8.15.0+), Strategic Planning Workspace (4.15.0+), and Resource Management Workspace (5.7.0+).
Practical Implementation Considerations
- Planning is critical: Define partition structure carefully as partition criteria fields become read-only after configuration on a given table.
- Execute configuration changes during maintenance windows to avoid disruption and ensure correct record visibility updates.
- Ensure you have the EWD admin role [snspmewd.ewdadmin] to perform these configurations.
- Identify appropriate partition criteria reference columns and target user or group assignments before starting the setup.
- Repeat the partition creation and configuration process for each functional area requiring data separation (e.g., IT Operations, HR Learning and Development).
Expected Outcomes
By properly configuring EWD, ServiceNow customers can enforce granular data access controls within SPM, improving data security and compliance. Users will see only the data relevant to their assigned partitions, ensuring clear separation of functions and reducing risk of unauthorized data exposure. Legacy records will accurately reflect partition assignments after running the update job, maintaining consistent data integrity across the platform.
Configuring Enterprise-Wide Deployment (EWD) involves creating partitions, defining partition criteria for supported tables, and assigning partition roles to users or user groups to enforce function-level data separation.
High-level configuration process
EWD configuration is an administrative activity that requires planning before implementation. To achieve data separation with EWD, complete the following steps in order:
- Create a partition record with assigning a new or existing role to it. For details, see Create and configure a partition.
- Configure partition criteria for each supported table that you want to define data partitioning for that partition. For details, see Assign partition role for access to the partition.
- Assign the partition role associated with the partition record to the users or user groups who should have access to those partitioned tables. For details, see Verify partition configuration.
Repeat this process for each function partition you need to create. For example, create separate partitions for IT Operations and HR Learning and Development.
- Update the existing records in the project, demand, programs, portfolios, and planning item tables with partition details by running the scheduled job. For details, see Update partition details for existing records.
Partition configuration checklist
Before configuring Enterprise-Wide Deployment, ensure the following are in place:
- The EWD admin [sn_spm_ewd.ewd_admin] role assigned to you.
- The reference column to use as the partition criteria field is identified. All partitions on the same table must use the same reference column — for example, Department for all partitions on the Project table.
- The users or user groups that should have access to each partition are identified.
- A plan for handling existing records is in place. After configuring partitions, run the Update existing records with partition details scheduled job to populate partition values on historical records.
Supported tables for partition criteria
Partition criteria can be configured for the following core tables:
- Project [pm_project]
- Demand [dmn_demand]
- Program [pm_program]
- Portfolio [pm_portfolio]
Related records and sub-entities for these tables automatically inherit the partition value from the parent record. For a full list of tables in scope, see Supported tables for partition.
Supported workspace versions
- Project Workspace (7.3.0)
- Portfolio Planning Workspace (8.15.0)
- Strategic Planning Workspace (4.15.0)
- Resource Management Workspace (5.7.0)