Security Incident Response manual assignment

joel_tan1991
Kilo Contributor

How do I remove the assignment group which was assigned automatically upon submit?

find_real_file.png

I have set the assignment rule to "Manually" for the requests.

find_real_file.png

Upon creating and submitting while leaving the assignment group blank, it will be automatically populated with the value "SIRT". The SIR tasks work just fine (Assignment group and Assigned to remains blank upon creation). 

 

Are there any place which I'll need to configure to prevent this auto-assigning of assignment group?

 

Thank you

1 ACCEPTED SOLUTION

andy_ojha
ServiceNow Employee
ServiceNow Employee

Hi Joel,

There is an Assignment Rule here on the <sn_si_incident> table that needs to be modified.  It is called "SIRT Assignment" - refer to screenshot.

If you change this Assignment Rule to Active = False, you'll achieve the behaviour you are looking for on manual SIR creation.

find_real_file.png

View solution in original post

7 REPLIES 7

Ct111
Giga Sage

Hi Joel,

 

Please check 

 

System Policy ---> Assignment Lookup Rules

 

and in that change the one related to incident table  as per your needs , that whether you want to keep it or remove it.

 

 

PLEASE mark my answer as CORRECT if it served yor purpose

There is currently one record in it. And I do not think it will affect the Security Incident application due to the different category and subcategory values.

find_real_file.png

I have went to disable it in hopes that it will somehow work but it didn't. The assignment group was still populated.

is some client script running on FOrm load which is setting this assignment

or some business rule try to figure out.

 

There has to be something there try to watch that field and make somechanges to the form and again reload you will get to know the scripts,UI polices associated with that field.

 

 

PLEASE mark my answer as CORRECT if it served yor purpose

 

Have you checked this 

 

System Property  related to group , there can be posssiblity that on Form Load somewhere the system property is called

Eg)

   problem.management.group

and there will be some sys_id associated with it . So if this property is called then group corresponding to that sys_id is assigned.

PLEASE mark my answer as CORRECT if it served yor purpose