Reopening an incident

  • Release version: Australia
  • Updated March 12, 2026
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Reopening an incident

    This feature allows ServiceNow users to reopen a resolved incident for further investigation if the issue persists. Reopening can be initiated from the incident resolution email notification or directly from the incident form within Incident Management or various portal interfaces such as the Service Portal and Employee Service Center (ESC).

    Show full answer Show less

    Key Features

    • Reopen Access: Incident reopen is available to agents with incident write access (snincidentwrite), callers, and the users who originally opened the incident (requesters).
    • Reopen Options: Users can select the "Reopen incident" link in resolution emails or use the "Reopen" option on the incident form and supported portals.
    • Incident State Change: When reopened, the incident state changes from Resolved to In Progress.
    • Audit Fields: The system automatically populates "Last reopened by" and "Last reopened at" fields to track who reopened the incident and when, aiding in audit and reporting. The "Reopen count" field tracks the number of times an incident has been reopened.
    • Role-Based Limitations: ESS users without roles can reopen incidents if they are callers but cannot resolve, reopen, or close major incidents.
    • Closed Incidents: Closed incidents cannot be reopened directly. Instead, replying to the resolution email with "Please reopen" in the subject opens a new incident with selected fields copied from the closed incident, configurable via the com.snc.incident.clonefieldsonreopen property.

    Practical Implications for ServiceNow Customers

    ServiceNow customers can leverage this functionality to ensure unresolved issues are properly tracked and addressed without losing the audit trail of incident handling. It enables better communication between users and support agents by allowing users to easily reopen incidents through multiple interfaces. Additionally, the audit fields and reopen count improve incident lifecycle reporting and management.

    Administrators should configure the cloning property to specify which fields to copy when reopening via email to maintain consistency in new incidents created from closed ones. Understanding role restrictions helps in setting appropriate access controls for incident reopening across different user groups.

    Reopen a resolved incident from the incident’s resolution notification email or from the incident form in Incident Management to further investigate an issue that is still impacting you.

    When an incident is resolved, an incident resolution email notification is sent to you. If you are not satisfied with the resolution of your incident, you can request to reopen the incident using any of the following methods:
    • Select the Reopen incident link from the incident resolution email notification.
    • Select the Reopen option on the incident form in Incident Management or the Portal UI’s such as Service Portal and Employee Service Center (ESC) portal.
    Figure 1. Reopen option on the incident form
    Reopen option on the incident form
    Figure 2. Reopen option in the Service portal
    Reopen option in the service portal
    Figure 3. Reopen option in the Employee Service Center (ESC) portal
    Reopen option in the service portal

    Once an incident is reopened, the state of the incident is then changed from Resolved to In Progress.

    The following conditions are applicable when reopening an incident:
    • You can reopen a resolved incident if you are an agent with incident write access (sn_incident_write), or caller, or Opened by (requester) user for the incident.
    • Both the caller and the requester can view and use the Reopen incident option on the Portal UIs, such as Service Portal and ESC portal.
    • If you are an agent, you can view and use the Reopen option on the incident form to reopen any incident that is assigned to you or to other agents. However, on the Portal UI, you can only view and use the Reopen incident option to reopen an incident if it’s assigned to you or you are the caller or requester for the incident.
    • If an incident is reopened by a user after it was resolved, the Last reopened by and the Last reopened at fields are automatically populated with the name of the person who reopened it and the date and time when the incident is reopened. During audit, this information helps you to generate various reports for reopened incidents.
    • On the Incident form, there is an existing field named Reopen count. Incidents that were reopened prior to the Kingston release, may already have some non-zero values in the Reopen count field while the values in the new fields, Last reopened by and the Last reopened at are null. For incidents that are reopened after the Kingston release, the Last reopened by and the Last reopened at fields are populated.
    • If you do not have any roles in the system (ESS) and you change the incident state to Resolved, you receive a notification with a Reopen incident link.

    • If you do not have any roles in the system (ESS) and you are the caller, you can click Reopen on the incident form to reopen the incident.

      Note:
      An ESS user is not able to resolve, reopen, or close a major incident even if the user is the caller.

    If the incident is already closed, you cannot reopen that incident. However, if you request to reopen the incident by replying to the resolution notification email, a new incident is opened with selected field values that are copied from the closed incident. To enable this feature, you must add fields as values in the List of fields (comma-separated) to copy from the original incident when an incident is reopened by email (com.snc.incident.clone_fields_on_reopen) incident property. These fields are copied from the closed incident to the new incident. Add the text Please reopen to the subject line of the email.