assignment group in security incident response is limited to a select set of security groups

HugoFirst
Kilo Sage

We have a user who wants to assign a Security Incident to a regular support group.  By regular, I mean a group which is not related to security operations.  But the assignment group is limited to only security related group.  How can I open this up?   I checked the usual suspects and I came up empty, there is a dynamic filter, but it does not limit the groups.  The assigned to field is blank, so that it not the limiting factor.

1 ACCEPTED SOLUTION

Allen Andreas
Administrator
Administrator

Hello @HugoFirst 

We don't know what are the usual suspects to you as we don't know your skill level, etc.

In the future, please simply state all that just so we're on the same page.

Out of box, there is a dictionary override for the security incident table with it's own reference qualifier specified.

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

View solution in original post

3 REPLIES 3

Allen Andreas
Administrator
Administrator

Hello @HugoFirst 

We don't know what are the usual suspects to you as we don't know your skill level, etc.

In the future, please simply state all that just so we're on the same page.

Out of box, there is a dictionary override for the security incident table with it's own reference qualifier specified.

Please mark reply as Helpful/Correct, if applicable. Thanks!


Please consider marking my reply as Helpful and/or Accept Solution, if applicable. Thanks!

soumyaigc
Tera Contributor

Hi,

did you find any solution for this? How to show custom assignment groups under SIR?

It turns out that our security team decided to "live with it".  So for now, we haven't fixed it.

That said, I did check out Allen Andrea's advice and it seems like good advice.

Look at the dictionary overide for security incident and change it or delete it.  I would first backup the override itself with an XML Export so you can restore it if needed.

 

The dictionary override should appear at this link: 
https://YOUR_INSTANCE.service-now.com/nav_to.do?uri=sys_dictionary_override.do?sys_id=573aa1fddf5331...