Domain Separation and HR Service Delivery
The ServiceNow® HR Service Delivery application improves the employee service experience by automating HR interactions and providing a single platform for all HR services. Domain separation is supported in HR Service Delivery.
Domain separation separates data, processes, and administrative tasks into logical groupings called domains within a single ServiceNow instance. You can then control several aspects of this separation, including which users can see and access data.
HR Service Delivery provides the basic level of domain separation support. Basic domain separation (data separation ) implies that if the data and all the related configurations reside within a particular domain, HR Service Delivery will function as expected. Hierarchical domain structure, sharing of data/configurations and logic/process separation is not supported by default in HR Service Delivery as per the basic domain separation definition.
Support level: Basic
- There is business logic to ensure data goes into the proper domain for the application’s service provider use cases.
- In the application, the user interface, cache keys, reporting, rollups, aggregations, and so on, all consider domain at run time.
- The owner of the instance needs to be able to set up the application to function normally across multiple tenants.
Overview of HRSD domain separation
- Enforce absolute data segregation between business entities (data separation).
- Customize business process definitions and user interfaces for each domain (delegated administration).
- Maintain some global processes and global reporting in a single instance.
How domain separation works in HR Service Delivery
- While HR Service Delivery supports separation of data, separation of logic and process is not fully supported. Hinweis:
- For more details on domain separation in HR Service delivery, see Guidance for proper HR Service Delivery domain separation.
- To learn more about process separation, see the Data Separation versus Process Separation section in this KB article.
- When working in a domain-separated implementation, ensure that records are created at the right domain level so that it is visible to the right set of users.
For example, domains that look like:
- Global → TOP
- Domain A
- Domain B
Hinweis:Global is not a domain.When agents are shared across domains, agents should reside in global and have access to the remote HR cases of all onboarded consumers.
- For any user in Domain A or Domain B to access an HR case, the HR case must be created at an global level.
- If an HR case is created in Domain A, a user from Domain B cannot access it. Likewise, if an HR case is created in Domain B, a user from Domain A cannot access it.
- For an HR case to be visible to the users in TOP and Domain A, create the HR case in Domain A.
- For an HR case to be visible to the users in TOP and Domain B, create the HR case in Domain B.
- Global → TOP
Use case: Domain separation in HR Service Delivery
While the behavior offered with domain separation provides multi-tenancy support, multi-tenancy is still contained within a single instance. A few properties, data and processes are always global and shared across all domains. For example, the system’s “Remember me” option on the login page is global and cannot be specified per domain.
If a complete and total separation of all system properties is needed and does not require global reporting or global processes, separate instances are the best option.