Hi, I hope I can get some help with this frustrating issue.
I was asked to prove SOC analyst with an option to add a coloured tag for particular SIR records from the workspace.
These would be used in historical analysis and reporting.
I added the required tag, let's say for example "Kardashian onboard" in the "Security Group tag".
But this cannot be added or viewed from the Security Operations Work Space.
I hope to found out
- Is the Security Tag button in SIR Workspace intentionally unsupported, or is this a known gap?
If unsupported, why is the UI control exposed at all for Workspace users?
Is there an OOTB or supported way to hide/remove this action so analysts don’t attempt to use it?
Any clarification from ServiceNow or others who have handled this in production would be greatly appreciated.
Thanks in advance.
Charles.
