How to prevent ServiceNow from auto-assigning users to an incident?

[Pierre D1]

I am currently using ServiceNow to create security incidents based on alerts from my SIEM. My issue is that while I am able to select the correct group for the incident assignment, it is currently auto-assigning the incident to random users in that group. I would prefer that ServiceNow not assign the incident to anyone, so my analysts can assign the incident to themselves. I've looked at Assignment Rules and couldn't find anything relevant, is there someplace else I should be looking? 

[Michael Fry1 · Accepted solution]

Check under Security Incident > Administration > Configuration. Out of the box, auto-assignment is enabled. You can disable it:

[Pierre D1]

Thanks Michael - that was what I was looking for!