Exception approvals

[Guilledev]

Hello everyone, I have a request to be able to have 2 levels of approval when creating an exception for vulnerable items. 

1st level - only supervisor/manager of the user
2nd level - 'Exception Approver - Level 2' group - one approval is sufficient

I can't find any relationship between the exception rules and approval rules and configurations.

Any idea how can I achieve this? 

[Rahul Kumar17]

Hi Guilledev,

In ServiceNow Vulnerability Response, you can configure multi-level approval workflows for exceptions using the Approval Definitions and Approval Rules tables. Here are the general steps to configure a two-level approval workflow for exceptions:

1. Create an Approval Definition for the first level of approval. Navigate to "Approval Definitions" and create a new record. Set the appropriate values for the fields such as "Name", "Approval Group", "Approver Field", and "Requested For". For example, you can set the "Approval Group" field to the supervisor/manager group of the user, and the "Approver Field" to "u_approver_level_1". Save the record.

2. Create an Approval Definition for the second level of approval. Create a new record in "Approval Definitions" and set the appropriate values for the fields. For example, you can set the "Approval Group" field to "Exception Approver - Level 2", and the "Approver Field" to "u_approver_level_2". Save the record.

3. Create an Approval Rule for the first level of approval. Navigate to "Approval Rules" and create a new record. Set the appropriate values for the fields such as "Name", "Approval Definition", "When", and "Conditions". For example, you can set the "Approval Definition" field to the first level approval definition created in step 1, and the "Conditions" field to "state=ready^risk_exception=true^u_approver_level_1ISNOTEMPTY". Save the record.

4. Create an Approval Rule for the second level of approval. Create a new record in "Approval Rules" and set the appropriate values for the fields. For example, you can set the "Approval Definition" field to the second level approval definition created in step 2, and the "Conditions" field to "state=ready^risk_exception=true^u_approver_level_2ISNOTEMPTY". Save the record.

5. Configure the "Approver Field" on the Risk Exception form to match the approver fields configured in the Approval Definitions and Approval Rules. You can do this by navigating to the "Risk Exception" table and editing the form layout to include the "u_approver_level_1" and "u_approver_level_2" fields.

With these configurations, when a user creates a risk exception, the first level approver (supervisor/manager) will receive an approval request. Once they approve, the second level approver (Exception Approver - Level 2 group) will receive an approval request. Once they approve, the exception will be created.

Thanks,

Rahul Kumar

[Guilledev]

The thing is that I cannot create approval rules, when I go to the Approval rules form there's no way to create new record