Remove assignments for host vulnerable items in bulk

Remove yourself or your groups from the  Assigned to  and  Assignment group  fields on host vulnerable items (VITs) or remediation tasks (VUL) if you determine that the records aren’t within your scope for remediation, or if you think that records have been incorrectly assigned to you or to your groups.

Before you begin

Role required: sn_vul.vulnerability_analyst, and sn_vul.vulnerability_admin

About this task

The  Unassign  feature is applicable for records in any state other than Closed or Resolved. When you remove assignments for host vulnerable items using the bulk edit feature, only relevant records are updated.

Procedure

1. Navigate to Workspaces > Vulnerability Manager Workspace.
2. On the List page, under Host Vulnerable items, open the Active or All list.
3. Perform one of the following:
   • Select the check box next to each item if you want to use the Only Selected Items option in the vmws-bulk-edit-unassign.html#vmws-bulk-edit-unassign__record-slection-field-unassign field.
   • Apply filters if you want to use the All Vulnerable Items that match filter option in the vmws-bulk-edit-unassign.html#vmws-bulk-edit-unassign__record-slection-field-unassign field.
4. Select the Bulk Edit button.
5. On the form, fill in the fields to remove assignments in bulk.

   Table 1. Bulk Edit modal fields

   Field	Description
   Record Selection	Records to update. Choices are: Only Selected Items: Select this option if you want to update the records you selected using the check box. All Vulnerable Items that match filter: Select this option if you want to update the filtered records. Remediation Task: Select this option if you want to update the records in a remediation task and then select the desired remediation task in the Remediation task field. Vulnerability Entry: Select this option if you want to update the records specific to a common vulnerable entry (CVE) and then select the CVE in the Vulnerability Entry field. Note: Records with invalid CI or CI decommissioned aren’t updated. Only the records in the Open, Under Investigation, Awaiting Implementation, or Deferred state are updated.
   State	Select the state as Do Not Update.
   Unassign	All the selected vulnerable items are unassigned from assignment group and remediation owner. Note: This field appears when you select the State as Do Not Update. When you unassign records, a remediation task is created which is sent for approval.
   Work notes	Text that you enter to describe the changes.

6. Click  Edit.
   A remediation task is created with the selected host vulnerable items (VITs).

   Your request is submitted for approval and the approver receives an email notification about your request.

   The state of the host vulnerable items (VITs) and remediation task (VUL) transitions to In Review. If a remediation task is updated with this feature, the  Assigned to  and Assignment group  fields on all of its associated VITs are also cleared upon approval of your request.

Result

In the Vulnerability Manager Workspace, on the List page, navigate to Exception Requests > All and open the corresponding state change approval record (VCA#) and check the status of your request in the Approval state column:

Approval state	Result
Approved	The Assigned to and  Assignment group fields of all the host vulnerable items are cleared.
Rejected	The Assigned to and  Assignment group fields of all the host vulnerable items are not updated.

In the Activity stream of a record or remediation task, you can view the entire workflow of your request.