# Domains

The "Domain Security" allows administrators to manage data domains within the organization.

* **Domain Creation:** Only the "Domain Creator" role can establish new domains, including assigning governance and steward/custodian/owner roles.
* **Domain Management:** Administrators can update configurations, assign roles, and define access controls for existing domains (who can view/edit terms).

  <figure><img src="/files/WvYbkeUayWtroXMD6EVL" alt=""><figcaption></figcaption></figure>
* Once a domain is created, the SGA of the corresponding domain and OE\_ADMIN have permission to perform the following actions through the security settings:
* **My Watchlist:** Add/Remove Domains: Manage domain inclusions in their watchlists and user watchlists (if users have read access to the domain).
* **Access Permissions (Metadata & Data):** Add, modify, or delete metadata and data access permissions for roles and users within the domain.
* **Governance Roles:** Manage governance roles for the domain, including adding, editing, and deleting them.
* **Cascade Governance Roles:** Apply governance roles to all categories & subcategories within the domain (SGA and default Role Admin).
* **Delete Role Access:** Remove access permissions assigned to roles (individually or in bulk).
* **Domain Configurations:**
  * **Classifications:** Configure data classifications for the domain.
  * **Categories:** Manage categories and subcategories within the domain.
  * **Default Data Associations:** Set default preferences for copying titles, descriptions, masking data, restricting access, and showing classifications in the catalog (applied to all terms in the domain).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ovaledge.com/release8.1/administration/security/domains.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.