Request for Guidance on Updating “State” Field in Security Incident (SIR Scope)

[MadhuDanalN]

I need your guidance on updating the State field choices in the Security Incident [sn_si_incident] table within the SIR scope.

Currently, the State field displays the OOTB values — Draft, Analysis, Contain, Eradicate, Recover, Resolved, Closed.
I would like to modify these to align with our standard workflow as follows:

• New

• In Progress

• On Hold

• Escalate

• Resolved

• Closed

Could you please advise on the correct approach to update the OOTB State field within the SIR scope, preferably without creating a new field?
If any configuration steps or permissions are required (e.g., using a dictionary override or process definition update), when i remove that existing felid its showing in the form ,
So what happened when i refresh new choice will be visible and suddenly back to existing choices,
please guide me on the process.

[Ankur Bawiskar]

@MadhuDanalN 

Pointers

-> If you don't want to use the OOTB ones then remove those by Right Click Field -> Configuring -> Choices

-> Move the choices from right to left

-> then add your new ones

-> Save & this adds the choices only for your table + state field

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[MadhuDanalN]

Thank you for your rersponce @Ankur Bawiskar 
I have added like that but in the form we can't see the choices its blank and not able select that field

[Ankur Bawiskar]

@MadhuDanalN 

it should work fine.

-> I did the same for sc_task state field and added my own choices

-> also check default value for State field and you can add Dictionary Override and set your own Default value with the choice value you just now created

💡 If my response helped, please mark it as correct ✅ and close the thread 🔒— this helps future readers find the solution faster! 🙏

[MadhuDanalN]

@Ankur Bawiskar  Thank you for replay

It should work within the same scope; however, since the Task table is in the Global scope and I want to modify the State field in the SIR scope, it shows an error stating that changes cannot be made in the SIR scope because the table is in the Global scope.