---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/servicenow-platform

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# MID Server domain separation

# MID Server domain separation {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 Minuten Lesedauer

Use the MID Server user role to configure MID Servers to access separate domains. The
credentials in the config.xml file of a MID Server determine which domains
it can access. Specific MID Server policy records can be restricted for use only by MID Server
from the same domain.  

|-|
|   |
[ ]

{#c_MIDServerDomainSeparation__table_qxn_nt4_nhb}

The records that can be read, updated, or created by a MID Server are determined by the
credentials configured for that MID Server in the config.xml file. These
are the user credentials that a MID Server uses to access the instance and specify which
domain's records that MID Server can access.  
You can create versions of these specific MID Server policy records that only a MID Server from the same domain can use. This process separation is supported for records in tables that extend MID Server Synchronized Files \[ecc_agent_sync_file\]:

* MID Server MIB File \[ecc_agent_mib\]
* MID Server JAR File \[ecc_agent_jar\]
* MID Server Script File \[ecc_agent_script_files\]
{#c_MIDServerDomainSeparation__ul_e25_j4x_tv}  
Hinweis:  
Attachments on MIB or JAR file records might not appear as they did in a non-domain separated environment. The attachments do not appear because the Attachments \[sys_attachment\] table is data separated. When data is separated between domains, a record in a child domain cannot access records in a parent domain.

## Set up domain separation for MID servers {#ariaid-title2}

Set up domain separation through the MID server user role and the MID Server
configuration file.

### Vorbereitungen

Role required: agent_admin or admin

### Prozedur

1. [Configure a MID Server user](https://servicenow-prod.fluidtopics.net/GQh5GGVROxXcofmzvAwS~w#t_SetupMIDServerRole "To communicate with the instance, MID Servers need a user ID and the appropriate role. Create the user ID for a MID Server and grant the ID the mid_server role. To prevent MID Server validation failure, the system runs business rules to monitor the settings selected for MID Server users.") within a specified domain with the proper mid_server role.
2. Specify this user within the MID Server config.xml file.  
   When you set the [MID Server user credentials](https://servicenow-prod.fluidtopics.net/1n4BMA3dcXnEVbu~5ko~HA#t_ConfigMIDSvrSvcCredentials "MID Server service credentials are required to manage the MID Server service on the host machine, including its ability to successfully auto-upgrade.") in the config.xml file, make sure they are in the proper domain.

### Nächste Maßnahme

If you must change the MID Server domain:

1. Stop the MID Server and delete the ecc_agent record.
2. Update the MID Server config.xml with the new user in the new domain and restart the MID Server service.
{#t_SetUpDomainSeparationForDiscovery__ol_xvf_4qv_s1b}  
If you need to create versions of specific MID Server files that only MID Servers in your domain can use:

1. Open or create a record in one of these MID Server modules:  
   * SNMP MIBs
   * JAR Files
   * Script Files
   {#t_SetUpDomainSeparationForDiscovery__ul_fzb_krz_35}
2. Update an existing domain policy or submit a new record.  
   Hinweis:  
   Attachments on MIB or JAR file records might not appear as they did in a non-domain separated environment. The attachments do not appear because the Attachments \[sys_attachment\] table is data separated. When data is separated between domains, a record in a child domain cannot access records in a parent domain.
{#t_SetUpDomainSeparationForDiscovery__ol_zk4_qqv_s1b}

## Configure a multi-domain MID Server {#ariaid-title3}

You can create a MID Server in the global domain that can explore targets in other
domains.

### Vorbereitungen

Before configuring a multi-domain MID Server:

* Activate the Domain Support - Domain Extensions Installer \[com.glide.domain.msp_extensions.installer\] plugin.
* Ensure that your instance is [domain
  separated](https://www.servicenow.com/docs/access?context=c_DomainSeparation&version=australia&pubname=australia-platform-security&ft:locale=en-US).
{#configure-multi-domain-mid-server__ul_kjs_lh5_bbb}

Role required: admin

### Prozedur

1. Type sys_properties.list in the navigation filter and press Enter.
2. Locate the glide.ecc.enable_multidomain_mid property.
3. Set the value of the property to true.  
   Hinweis:  
   Enabling this property has no effect on existing MID Servers. MID Servers in a domain prior to setting this property, remain in that domain.
4. Create a MID Server in the global domain.  
   A MID Server created in the global domain after this property is set to true can explore any domain for which it has the credentials. However, this MID Server is restricted to trying only the credentials for the target domains requested by ECC Queue inputs.  
   Warnung:  
   If you reset the glide.ecc.enable_multidomain_mid property to false after creating a multi-domain MID Server in the global domain, that MID Server writes all the data it receives to the global domain and not to the correct domains.