CIS-SP practice question 3 of 10

Visibility can be granted to users by which of the following means: Choose 2 answers

Full set: 45 questions
Answer options
A: User visibility domains Correct answer
B: Group Membership Correct answer
C: Role
D: Default Domain
Correct Answer:
A. User visibility domains; B. Group Membership
Explanation

In a ServiceNow instance with Domain Separation, a user's visibility into different domains is determined by an inheritance model. Visibility can be explicitly granted to an individual user by adding domains to the 'Visibility domains' related list on their user record. Alternatively, and more commonly for scalability, visibility is granted to a group. Any user who is a member of that group automatically inherits the domain visibility assigned to it. These two methods allow users to see records and data from domains other than their session domain.

Why Incorrect

C. Role: Roles grant permissions to access applications and perform actions (e.g., create, read, write, delete), but they do not control data visibility across domains.
D. Default Domain: The Default domain is a specific domain assignment for system-level configurations. Assigning a user to it does not grant them visibility into other tenant domains.

References

1. ServiceNow Product Documentation - Domain separation visibility:

"Visibility domains grant users visibility to a domain other than their own. You can grant domain visibility to a user or a group." This statement directly supports both correct answers (A and B). The documentation further clarifies, "Users inherit visibility from any groups that they are a member of."

Source: ServiceNow Product Documentation, "Domain separation visibility," Rome release.

2. ServiceNow Product Documentation - Grant a user domain visibility:

This document outlines the procedure for adding domains to the domainvisibility related list on a user's record, confirming that visibility can be granted directly to a user.

Source: ServiceNow Product Documentation, "Grant a user domain visibility," Washington DC release.

3. ServiceNow Product Documentation - Domain separation and roles:

"Roles control access to applications and modules. Domain separation controls access to data." This reference explicitly distinguishes the function of roles from domain visibility, confirming that roles are not a means of granting domain visibility.

Source: ServiceNow Product Documentation, "Domain separation and roles," Washington DC release.

Scroll to Top