For a domain-separated instance owned by an MSP, customers are organizations that are independent from each other.
One administration team oversees the entire DS stack, including the DEV > TEST > PROD instances and that one SDLC is used.
A domain separated instance is one instance, (one database with one set of tables) that is shared across multiple organizations. It is not multiple independent virtual machines sharing a server.
Domain Separation does not physically separate the data at the database level. Queries from ServiceNow applications to the database include a WHERE clause that limits the data returned to the user making the request, based on their domain access rights. Direct database access is never allowed.
Tables 1, 1A, 2 and 3 are domain enabled tables. This means records on those tables can be isolated from users in different domains.
Table 4 is not a domain enabled table. Any records created on table 4 are available to all users of the instance given the appropriate roles/permissions.
With the use of ACLs and domain fields you can control read access to table 4 to only process users of a certain domain if required.
Processes and UI elements flow DOWN through a domain hierarchy (child domains inherit the process and UI of their parents)
Properties that are global in scope are the same for all users of an instance.
Process is any platform element that when changed generates a sys_update_xml record in an Update set. Some process records are not moved with update sets; for example, any custom table with a sys_overrides is process and custom tables records are not moved with Update sets.
Data Flows UP through a Domain hierarchy (Parent Domains can see the data of children domains) Any table that contains a domain field inherits data separation.
Data is records that when changed do not generate an Update Set record such as those generated by Incident, Problem, Change.
Data Flows UP through a Domain hierarchy (Parent Domains can see the data of children domains) Any table that contains a domain field inherits data separation.
The Show tables with a domain field option in the Domain configuration module can be used to get a list of domain separated tables.
The Show tables with a domain field option in the Domain configuration module can be used to get a list of domain separated tables.