In a new domain separated instance, which data will a user in customer Domain X definitely have visibility to?
Choose 2 answers
Answer : C, E
In ServiceNow, domain separation is used to segregate data, processes, and administrative tasks into logical groupings called domains. This allows for control over data visibility and operations within an instance. When it comes to data visibility:
* Domain X: A user in Domain X will definitely have visibility to their own domain, as this is the primary context in which they operate1.
* Child domains of Domain X: Users can view data in their home domain (Domain X) and any child domains of that home domain. This is because child domains inherit permissions and visibility from their parent domains, allowing users in a parent domain to see data in the child domains1.
However, users do not have access to data present in their parent domains or other unrelated domains by default. The primary domain and default domain are typically reserved for global or top-level administrative purposes and are not automatically visible to users in customer domains unless specific permissions are granted12.
It's important to configure domain separation carefully to ensure that users have the appropriate level of access to data necessary for their roles while maintaining the security and integrity of the data across the instance31.
Given TOP as a parent domain for MSP, ACME, and Initech, and MSP contains TOP What additional domain configuration is required for UserA in MSP to read records in ACME?
Answer : C
In ServiceNow, domain separation is used to manage data visibility and access control in a multi-tenant environment1. The 'contains' relationship in domain separation defines a hierarchy where a parent domain contains child domains, and by default, users in a parent domain can see the records in child domains1.
Given that TOP is the parent domain for MSP, ACME, and Initech, and MSP contains TOP, UserA in MSP would already have visibility into TOP. However, for UserA to read records in ACME, additional configuration is required because ACME is not a child domain of MSP by default.
The correct action is to add visibility to ACME for UserA . This is typically done by configuring the user's domain membership or by adjusting the domain visibility settings to include ACME for UserA. This ensures that UserA can access records in ACME while still being primarily associated with the MSP domain1.
The 'contains' relationship between MSP and ACME (A) is not necessary because it would imply a hierarchical relationship that does not reflect the given structure. Adding both visibility to ACME for UserA and contains between MSP and ACME (B) is also not required and could potentially create an incorrect domain hierarchy. No additional configurations (D) would not suffice as it would not grant UserA the access needed to read records in ACME.
Which are required to retrieve and commit an update set?
Choose 2 answers
Answer : C, D
To retrieve and commit an update set in ServiceNow, certain prerequisites must be met to ensure proper management and deployment of changes across instances:
* You must have the admin role : Having the admin role is crucial because it provides the necessary permissions to manage update sets, which includes retrieving and committing them. This role ensures that only authorized users can make significant changes to the system12.
* The domain picker must be set to global (D): When working with domain-separated instances, the domain picker must be set to global to ensure that the update set is applied across all domains. This is important for maintaining consistency and avoiding conflicts between different domains within the instance2.
What domain must administrators choose to apply an Updates Set?
Answer : A
In ServiceNow, when applying an Update Set, administrators must select the Global domain. This is because Update Sets are designed to be applied from the Global domain to ensure that the changes are captured and can be moved across the instance without being restricted by domain separation1. The Global domain is the default domain where all the configuration records are created and where administrators typically work unless they switch to another domain for specific tasks1.
The Update Set system in ServiceNow is a mechanism for grouping and moving customizations from one instance to another or within the same instance. It captures the configuration changes made by administrators and bundles them into a set that can be transferred and applied elsewhere. Since the Global domain is the highest level in the domain hierarchy and is not restricted by domain-specific rules, it is the appropriate choice for applying Update Sets to ensure that the changes are universally available across all domains within the instance
What's a good globally unique candidate field that could be used to populate UserID?
Answer : B, C, D
When selecting a field to populate UserID in ServiceNow, it's crucial to choose an identifier that is globally unique to ensure that each user can be distinctly identified. The best practices for such identifiers include:
* Employee Number: Typically, an employee number is unique to an individual within an organization and does not change, making it a reliable identifier1.
* Email: An email address is inherently unique as it is tied to an individual and is used for communication, which also makes it a suitable candidate for UserID2.
* SSN (Social Security Number): While SSN is unique to each individual, it's important to note that using SSN as an identifier should be approached with caution due to privacy and security concerns. However, it is unique and could technically be used to populate UserID3.
The Last Name is not a good candidate for UserID because it is not globally unique; many individuals can share the same last name and it can change over time due to personal reasons.
For further details on creating unique identifiers and best practices, ServiceNow provides documentation and guidelines which can be referred to for implementing these practices within the ServiceNow environment.
Which of the following is a good practice to allow Service Providers to view all customer data?
Answer : A
Setting up a domain contains relationship is a good practice to allow Service Providers to view all customer data. This approach leverages ServiceNow's domain separation capabilities, which enable data segregation and access control across different domains. By configuring a domain contains relationship, you can ensure that Service Providers have the necessary visibility into customer data while maintaining proper data governance and security.
* ServiceNow Domain Separation Documentation
* ServiceNow Knowledge Base Article
Which role restricts access and allows for managing items in a domain-separated catalog?
Answer : D
The role domain_catalog_admin is specifically designed to manage items within a domain-separated catalog in ServiceNow. This role restricts access and allows for the management of catalog items, ensuring that only users with the appropriate permissions can make changes within their designated domain. This is crucial for maintaining data privacy and integrity across different domains, especially in environments where multiple customers or departments are served by a single ServiceNow instance.
* ServiceNow Domain Separation and Service Catalog1
* ServiceNow Product Documentation on Domain Separation2