Set up domain separation for Enterprise Architecture users

  • Versão de lançamento: Australia
  • Atualizado 12 de mar. de 2026
  • 1 min. de leitura

    • Enterprise Architecture supports domain separation for managed service providers (MSPs) to protect the sensitive data of each customer. The protection also ensures inability to view business application data of one customer by another customer and also secures the data within the domain.

    Antes de Iniciar

    Role required: admin

    Por Que e Quando Desempenhar Esta Tarefa

    Figura 1. Illustration of a sample domain map
    Illustration of a sample domain map

    Procedimento

    1. Install the Domain Support – Domain Extensions Installer system plugin to enable the domain separation feature forEnterprise Architecture.
    2. Create an administrator role at each domain level.

      The administrator can only configure and run the scheduled jobs.

    3. Create all your application portfolio data entities in the domain, specific to the enterprise, and not at the global level.
    4. Create indicators at the domain level.

      Do not create them at the global level and reuse the indicators for every customer under the parent level. Data is not visible at the global level.

    5. Create user groups and assign roles to users at the domain level, so that they can view only the data of the enterprise they belong to.
    6. Execute jobs for domain separated data.

      You can execute scheduled jobs, certification schedules, and assessments of indicators and scores at the domain level using the Run as role. Configure the Scheduled Script Execution form layout to add the Run as field from the Context menu.

      Figura 2. Scheduled jobs
      Scheduled jobs