{"templateId":"markdown","versions":[{"version":"v1.40","label":"v1.40 STS","link":"/products/custody/governance/domains/inject-a-domain","default":true,"active":false,"folderId":"c15a2701"},{"version":"v1.39","label":"v1.39 STS","link":"/products/custody/v1.39/governance/domains/inject-a-domain","default":false,"active":true,"folderId":"c15a2701"},{"version":"v1.38","label":"v1.38 STS","link":"/products/custody/v1.38/governance/domains/inject-a-domain","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.34","label":"v1.34 LTS","link":"/products/custody/v1.34/governance/domains/inject-a-domain","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.26","label":"v1.26 LTS","link":"/products/custody/v1.26/governance/domains/inject-a-domain","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.19","label":"v1.19 LTS","link":"/products/custody/v1.19/governance/domains/inject-a-domain","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.15","label":"v1.15 LTS","link":"/products/custody/v1.15/governance/domains/inject-a-domain","default":false,"active":false,"folderId":"c15a2701"}],"sharedDataIds":{"sidebar":"sidebar-products/custody/@v1.15/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Inject a domain","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"inject-a-domain","__idx":0},"children":["Inject a domain"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domain injection inserts a new domain between an existing parent domain and one or more child domains. Use it to add a governance layer without rebuilding the hierarchy."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Use carefully"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domain injection changes policy inheritance for future intents in the reparented child domains. Review policy impact before submitting the intent."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"api-reference-and-shared-process","__idx":1},"children":["API reference and shared process"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Task"},"children":["Task"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"API reference"},"children":["API reference"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["View current hierarchy"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/domains/getdomain"},"children":["Get domain details"]},", ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/domains/getdomains"},"children":["List domains"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dry run the injection intent"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/intents/intentdryrun"},"children":["Perform a dry run"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Submit the signed injection intent"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/intents/createintent"},"children":["Propose an intent"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domain injection uses the same ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_CreateDomain"]}," intent as normal domain creation, with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["childrenDomainIds"]}," populated. For the general domain creation procedure, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/governance/domains/reference"},"children":["Manage domains"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"when-to-use-domain-injection","__idx":2},"children":["When to use domain injection"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scenario"},"children":["Scenario"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Example"},"children":["Example"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Add compliance oversight"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Insert a compliance domain above operational domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Group regions"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Move existing country domains under a new regional domain."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Consolidate policy control"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Apply shared policies to a set of child domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Retrofit governance"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Add a missing parent layer after launch."]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"before-and-after","__idx":3},"children":["Before and after"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n subgraph Before[\"Before injection\"]\n Root1[\"Root\"]\n A1[\"Domain A\"]\n B1[\"Domain B\"]\n Root1 --> A1\n Root1 --> B1\n end\n\n subgraph After[\"After injection\"]\n Root2[\"Root\"]\n New[\"Injected domain\"]\n A2[\"Domain A\"]\n B2[\"Domain B\"]\n Root2 --> New\n New --> A2\n New --> B2\n end\n","diagramHtml":"

After injection

Root

Injected domain

Domain A

Domain B

Before injection

Root

Domain A

Domain B

","diagramHtmlDark":"

After injection

Root

Injected domain

Domain A

Domain B

Before injection

Root

Domain A

Domain B

"},"children":["flowchart TB\n subgraph Before[\"Before injection\"]\n Root1[\"Root\"]\n A1[\"Domain A\"]\n B1[\"Domain B\"]\n Root1 --> A1\n Root1 --> B1\n end\n\n subgraph After[\"After injection\"]\n Root2[\"Root\"]\n New[\"Injected domain\"]\n A2[\"Domain A\"]\n B2[\"Domain B\"]\n Root2 --> New\n New --> A2\n New --> B2\n end\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":4},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Administrator access to the parent domain."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Domain IDs for every child domain to reparent."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Child domains are ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Unlocked"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Policies for the injected domain are reviewed."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Approvers understand the policy impact."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Open intents in child domains are not affected by policies from the newly injected parent. New intents created after injection can be affected by the injected domain's policies."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"procedure","__idx":5},"children":["Procedure"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Get the domain IDs for the child domains."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Prepare a ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_CreateDomain"]}," payload with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["childrenDomainIds"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Include users and policies required by the injected domain."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Dry run the intent."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Submit the signed intent."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After approval and execution, verify that child domains now show the injected domain as parent."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Test a representative new intent in a child domain to confirm policy behavior."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"api-payload-example","__idx":6},"children":["API payload example"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following example creates a compliance domain and reparents two existing child domains beneath it. The ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["childrenDomainIds"]}," field is what makes this an injection rather than a regular domain creation."]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"json","header":{"controls":{"copy":{}}},"source":"{\n \"payload\": {\n \"id\": \"2d37d78f-6f75-4667-93f7-1c6c07d77491\",\n \"alias\": \"Compliance\",\n \"lock\": \"Unlocked\",\n \"governingStrategy\": \"ConsiderDescendants\",\n \"permissions\": {\n \"readAccess\": {\n \"domains\": [\"admin\"],\n \"users\": [\"admin\"],\n \"accounts\": [\"admin\", \"compliance\"],\n \"transactions\": [\"admin\", \"compliance\"],\n \"policies\": [\"admin\"],\n \"endpoints\": [\"admin\"],\n \"requests\": [\"admin\", \"compliance\"],\n \"events\": [\"admin\", \"compliance\"]\n }\n },\n \"description\": \"Injected compliance domain\",\n \"customProperties\": {},\n \"users\": [],\n \"policies\": [],\n \"childrenDomainIds\": [\n \"c837a972-4ea9-4abf-8e56-b70cc41b74dc\",\n \"7ec9c5a5-ff89-490f-99c1-6ea827c62bbb\"\n ],\n \"type\": \"v0_CreateDomain\"\n }\n}\n","lang":"json"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Dry run before submitting:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"sh","header":{"controls":{"copy":{}}},"source":"curl -X POST \"${CUSTODY_API_URL}/v1/intents/dry-run\" \\\n -H \"Authorization: Bearer ${JWT_TOKEN}\" \\\n -H \"Content-Type: application/json\" \\\n -d @inject-domain-intent.json\n","lang":"sh"},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Submit the signed intent:"]},{"$$mdtype":"Tag","name":"CodeBlock","attributes":{"data-language":"sh","header":{"controls":{"copy":{}}},"source":"curl -X POST \"${CUSTODY_API_URL}/v1/intents\" \\\n -H \"Authorization: Bearer ${JWT_TOKEN}\" \\\n -H \"Content-Type: application/json\" \\\n -H \"requestId: 0f50461a-d6d2-45c5-a57d-baa099cd562f\" \\\n -d @signed-inject-domain-intent.json\n","lang":"sh"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"validation-after-execution","__idx":7},"children":["Validation after execution"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["After the intent executes:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Call ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/domains/getdomain"},"children":["Get domain details"]}," for the injected domain."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Call ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/domains/getdomain"},"children":["Get domain details"]}," for each reparented child domain."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm the injected domain appears in the expected place in the hierarchy."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Call ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/reference/api/openapi/intents/intentdryrun"},"children":["Perform a dry run"]}," for a representative child-domain intent to confirm the expected policy is selected."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"common-mistakes","__idx":8},"children":["Common mistakes"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Mistake"},"children":["Mistake"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Result"},"children":["Result"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Fix"},"children":["Fix"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Child domain is locked"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Injection fails."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Unlock child domains before injection."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Missing child ID"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["A child remains under the old parent."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Include all intended child domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Wrong governing strategy"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Parent policy behavior differs from design."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Review strategy before submission."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No dry run"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Policy or payload errors are discovered late."]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Dry run before proposing the intent."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For field details, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.39/governance/domains/reference"},"children":["Domain reference"]},"."]}]},"headings":[{"value":"Inject a domain","id":"inject-a-domain","depth":1},{"value":"API reference and shared process","id":"api-reference-and-shared-process","depth":2},{"value":"When to use domain injection","id":"when-to-use-domain-injection","depth":2},{"value":"Before and after","id":"before-and-after","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Procedure","id":"procedure","depth":2},{"value":"API payload example","id":"api-payload-example","depth":2},{"value":"Validation after execution","id":"validation-after-execution","depth":2},{"value":"Common mistakes","id":"common-mistakes","depth":2}],"frontmatter":{"seo":{"title":"Inject a domain"}},"lastModified":"2026-08-04T20:25:11.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/custody/v1.39/governance/domains/inject-a-domain","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}