Domain Separation AI agent overview

The agent performs validated operations on domain visibility data without requiring direct access to domain visibility tables.

Prerequisites and setup

Role masking

Required role: Domain Admin.

AI agents use role masking to determine which users can access them. Ones installed with Now Assist applications have specific roles that come included with the application. If you select Users with specific roles for user access, you must configure the security controls to include these roles. For the instructions to change the security controls, see Define security controls for an AI agent.

In the data access settings, you must also add the necessary roles to enable reading of the tables for the records you want to evaluate for readiness. For example, you can add the itil role to the AI agent's list of approved roles so that it can access Incident records.

Accessing the Issue Readiness AI agent

Access the AI agent

1. Open the Now Assist panel.
2. Start a new interaction.
3. Enter the prompt, "domain visibility help."

The agent displays the available domain visibility operations and guides you through the selected task.

List all domain visibility for a user

Use this operation to view all domains a user can access.

1. Select List domain visibility from the agent’s options.
2. Provide the name of the user whose domain visibility you want to view.

The agent retrieves all domain visibility entries associated with the user.

Add domain visibility for a user

Use this operation to grant a user visibility to a specific domain.

1. Select Add domain visibility from the agent’s available options.
2. Provide the requested inputs:
   • User name
   • Domain name
3. The agent validates that the specified user and domain exist.
4. Confirm the user name and domain name and that you want to add the visibility for the user.

The agent adds visibility for the specified domain to the specified user.

Remove domain visibility from a user

Use this operation to revoke a user’s visibility to a specific domain.

1. Select Remove domain visibility from the agent’s available options.
2. Provide the requested inputs:
   • User name
   • Domain name
3. The agent validates that the specified user and domain exist and that the user currently has visibility to the specified domain.

   If no matching visibility exists, the agent reports that there is nothing to remove.

4. If visibility does exist, confirm the user name and domain name and that you want to remove the visibility for the user.

The agent removes visibility for the specified domain from the specified user.