Domain Separation

Domain Separation is a feature in the ServiceNow platform that allows data and process segregation within a single ServiceNow instance. It enables organizations to support multiple entities, such as business units, subsidiaries, or external customers, while maintaining isolation and control over data, processes, and administrative access.

This capability is especially useful for managed service providers or enterprises operating in multi-tenant environments, where it is critical to ensure that each domain operates independently while sharing a common infrastructure.

To learn more about Domain Separation, see the official ServiceNow documentation: What is Domain Separation?

Multi-Tenant Architecture with Domain Separation

This feature allows a single instance to support multiple clients by isolating their data and operations. Users cannot access or modify data from other domains unless authorized. When Qualys discovers assets, they are imported into the appropriate domain's CMDB Configuration Item (CI) table, preserving organizational boundaries.

Implementing Domain Separation for Qualys

This section outlines the high-level steps required to enable and configure domain separation in ServiceNow for Qualys. 

Before proceeding, ensure that domain separation is supported and licensed in your ServiceNow instance.

Prerequisites

Ensure the following prerequisites are met:

  • Domain separation plugin must be installed and activated.
  • You must have the admin role.
  • Your instance should be configured with domain hierarchy and domain-specific user roles.

Step-by-Step Instructions

This section describes the high-level steps required to configure domain separation for Qualys.

  1. Create Threads for Data Import 
  2. Configure the Domain Users to Threads
  3. Configure the Import Configurations
  4. Configure the Data Transfer Definition
  5. Configure the Connector