---
sourceDocument: Brazil Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Configuration Compliance assignment rules overview

# Configuration Compliance assignment rules overview {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Configuration Compliance assignment rules overview

Configuration Compliance assignment rules enable automatic assignment of test results to specific assignment groups for remediation within ServiceNow.
These rules help streamline the remediation process by ensuring test results are routed to appropriate teams based on defined criteria.
From version 14.9 onwards, terminology updates have been made---such as renaming Test Result Group to Remediation Task Group---to align with current standards.
Show full answer Show less  

## Key Features

* **Automatic Assignment Methods:** Test results can be assigned using three methods:
  * **Assignment group:** Select from existing ServiceNow AI Platform® user groups.
  * **Assignment Group Field:** Choose from assignment group fields related to the configuration item (CI), such as Approval Group, Assignment Group, or Support Group.
  * **Script:** Define custom assignment conditions using scripts, requiring advanced ServiceNow expertise.
* **Default Assignment Rule:** The base system includes a default rule ("Assign to CI support group") that assigns test results to the CI Support Group but is inactive by default.
* **Role-Based Access:** Users with the `snvulc.remediationowner` role can view and update test results and remediation tasks assigned to them or their groups. This role is assigned automatically with the itil role or can be granted directly.
* **Assignment Rule Evaluation:** Rules are evaluated automatically when test results are imported or reopened, after CI matching and risk score calculations. Rules are processed in order, assigning the first matching group and stopping further evaluation.
* **Manual Reapplication of Rules:** Admins can reapply changed assignment rules to active open test results (excluding manually assigned ones) using the Apply Changes button or by activating the scheduled job "Reapply all assignment rules" for periodic evaluation.

## Practical Usage and Benefits

* Assignment rules ensure test results are promptly and correctly assigned to the right remediation groups, improving workflow efficiency and reducing manual effort.
* Integration with remediation task rules allows remediation tasks to inherit assignment groups from their test results, maintaining consistent ownership.
* Changing the assignment group at the remediation task level updates all associated test results accordingly and prevents further automatic reassignment, preserving manual adjustments.
* Using the Vulnerability Manager Workspace to obtain the latest assignments is recommended as it is more efficient than reapplying rules through the classic UI.

## Key Outcomes

By leveraging Configuration Compliance assignment rules, ServiceNow customers can automate the routing of test results to appropriate remediation teams, ensuring timely and accurate ownership. This automation supports better remediation management, reduces manual intervention, and aligns assignment processes with organizational roles and workflows.  
Define the criteria by which test results are automatically assigned to an assignment group for remediation.  
Note:  
Starting with v14.9 of Configuration Compliance, the following terms have been renamed:{#cc-assignment-rules__entry__2}

| Terminology prior to v14.9 | Terminology v14.9 onwards |
|-|-|
| Test Result Group | Remediation Task |
| Group Rules | Remediation Task Rules |
| Policy | Test group |
[Table 1. Changes in terminology]

A default assignment rule, Assign to CI support group, is included in
the base system assigning test results to the CI Support Group.
Inactive by default.

The Assignment groups set by the Assignment Rules are used by Remediation Task Rules to assign owners to remediation tasks (RTs).

## Assigning test results automatically {#cc-assignment-rules__section_wwk_by2_t3b}

There are three different ways to assign test results using Assign using:

* Assignment group: This option allows you to select any of the existing ServiceNow AI Platform® user groups.
* Assignment Group Field: This option allows you to choose any assignment group field available using the cmdb_ci table. By default you see the following three group fields:
  * None: Indicates no default value for this mandatory field
  * Configuration Item: Approval Group
  * Configuration Item: Assignment Group
  * Configuration Item: Support Group
  {#cc-assignment-rules__ul_zbz_n4j_2gb}
* Script: This option allows you to define the conditions using a script. This option requires coding or advanced ServiceNow® expertise.

{#cc-assignment-rules__ul_th4_znj_2gb}See [Create or edit Configuration Compliance assignment rules](https://www.servicenow.com/docs/kSnDKMNPt7TTWc2jFM6XTw "Create rules to automatically assign test results based on filter conditions. These rules assign test results as they are imported.") for more information on creating assignment rules.

With the sn_vulc.remediation_owner role, you can view and update test results and remediation tasks that are assigned to them or to their assignment groups. To view the modules, navigate to AllConfiguration ComplianceTest ResultsMy Open Test Results, or Configuration ComplianceRemediation TasksMy Open Tasks.

The sn_vulc.remediation_owner role can be assigned directly to a user, or, it is
automatically assigned when you assign a user the itil role.

## Assignment rule evaluation process {#cc-assignment-rules__section_izw_yx2_t3b}

When a new test result is imported, or reopened after being closed, the assignment rules
are evaluated against it. The assignment rules are evaluated after CI matching, and Risk
Score calculations. A test result is only automatically evaluated upon initial import and
when a rule is changed, unless it is reopened after being closed. You can manually reapply
rules after changes.  
The following process is used for each new or reopened test result:

* For each test result assignment rule, the test result is compared to the assignment filter, lowest order rule first.
* Where the condition matches, the test result is assigned an assignment group. The lookup stops.
* Where the conditions do not find a match among all the rules, the test result remains unassigned.
{#cc-assignment-rules__ul_a2p_fj1_gdb}

## Reapplying assignment rules {#cc-assignment-rules__section_nxb_xnp_s3b}

When you change an assignment rule, use the Apply Changes button on the Assignment Rules list page to rerun all the changed rules on all active Open test results, except those that were manually assigned.  
Note:  
The assignment rules do not reevaluate manually created assignments.
The scheduled job \[Reapply all assignment rules\] is inactive, by default. When activated, it evaluates all the open test results against all active rules except those manually assigned. It can run Daily, Weekly, Monthly, Periodically, Once or On Demand.  
Important:  
As an admin and analyst, you can obtain the latest assignments for selected test results in the Vulnerability Manager Workspace. This method is more efficient than reapplying the Assignment Rules for all test results in the classic UI, which is a time-consuming process. For more information, see [Re-evaluate the remediation properties of the records in the Vulnerability Manager Workspace](https://www.servicenow.com/docs/f4Ar199GsH7eAZCRZSPnQA "Evaluate the assignments, remediation target date, remediation tasks, exceptions, and risk score for a set of records (VITs, AVITs, CVITs or TRs) in the Vulnerability Manager Workspace.").

## Assignment rules and remediation task assignment {#cc-assignment-rules__section_ddt_v2k_2gb}

Usually, you would assign your remediation task (RT) to the same assignment group as the test results in it. That is what the remediation task rules do, by default.

For example, if your RT groups by configuration item class, the remediation task created can be broken apart by the different assignment groups. An Oracle Database TRG can be assigned to Group 1, and an Oracle Database TRG
assigned to Group 2.

When the assignment group is changed at the remediation task level, all the test results in that remediation task which have same assignment group are updated to the new assignment group. The test results are marked as manually
assigned and are not eligible for further rule evaluation.

*[\>]: and then