Auto Approval for Manual Exception Request on Vulnerable Item record

[Ishaan Mishra]

Hi Community,

I'm looking for a way to automatically approve manual exception requests for vulnerable items in ServiceNow Vulnerability Response. Currently, when an exception request is raised manually on a vulnerable item, it goes through an approval process. However, I want to configure it so that these requests are auto-approved under certain conditions (e.g., If Configuration item class is Windows server, then upon manula exception no approval is required and the request gets auto approved).

Has anyone implemented this before? I’d appreciate any guidance on.

Please feel free to ask any specific details to understand the requirement better.

Regards,

Ishaan mishra

[JMSogalow]

Helo Ishaan,

You can create an Exception rule to Automatically deferred when the following condition is met: CI class is Windows server. You can also enrich the condition filter.

Hope this will help

Kind regards

Jean Marc

[SNAdmin47]

Hi @Ishaan Mishra , did you manage to get anywhere with this? Whilst we can set up exception rules to automatically set remediation tasks/vulnerable items to be set to Deferred they apply across the entire range in the exception rule. We would like to investigate any opportunity to not have an exception rule in place so that VITs/VULNs remain active but certain conditions (e.g., risk rating is 5) can be automatically set to deferred by Vulnerability Analysts without need for an approval.

I am considering altering the flow that's provided OOTB to accommodate this but would be curious if there's other options available.