# Defining Domains

Domains are containers of data sources that allow you to assign data ownership and access management to specific business units, subject matter experts, or teams at the nexus of cross-functional groups. Instead of centralizing your data governance and giving users too much governance over all your data, you delegate and control their power over data sources they own by granting them permission within domains in Immuta.

Domains are typically defined by your organization’s data governance board and closely aligned with business departments or units, such as Sales, Customer Service, or Finance. Domains can also be defined by value stream, such as Patient Health Records, Fraud Detection, or Quality Control.

## Who will do this?

The task of setting up domains in Immuta can be done by any member of the team with the [`GOVERNANCE` permission](/2024.2/people/immuta-users/reference-guides/personas-and-permissions.md) and assigning domain permissions can be done by any member of the team with the [`USER_ADMIN` permission](/2024.2/people/immuta-users/reference-guides/personas-and-permissions.md).

## Consider users' jobs in a domain

When delegating control to your data product owners, it's possible to further segment that control within domains. If you want to give the user control to build policies on the data sources (the data products) in the domain, that is managed by giving them the [`Manage Policies` permission](/2024.2/secure-your-data/domains/domains.md#permissions) in the domain.

## Related guides

* [Creating domains](/2024.2/secure-your-data/domains/domains.md#create-a-domain)
* [Assigning domain permissions](/2024.2/secure-your-data/domains/domains.md#assign-domain-permissions)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.immuta.com/2024.2/secure-your-data/getting-started-with-secure/overview-2/defining-domains.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.