In addition to domain paths, another way the system can be configured to limit visibility to records is through domain scoping.

Every user has two domain scopes when establishing a session in a domain-separated instance: The session scope is set to the domain listed in the user’s user record, but a user can manually change their session domain scope using the domain picker when logging in. Record scope uses the domain of the record and is active when viewing the form of any record. Visibility into different records and forms is determined by record scope and session scope. By default, the record scope takes precedence over the session scope.

Users with the domain_expand_scope role can change the domain scope using the Toggle Domain Scope UI action on a data form. When record scope is in effect, click the UI Action to switch to session scope and display all data available based on the user’s domain and child domains.

When session scope is in effect, click the UI action to change to record scope and display only data that matches the current record’s domain.