Manually assign agents to active security incidents

Use this procedure to assign agents to active security incidents.

Before you begin

Role required: sn_si.basic


  1. Navigate to Security Incident > Incidents > Unassigned Incidentsfor a list of security incidents that no one is assigned to.
  2. Open the security incident you want to assign.
  3. Click the reference lookup icon beside the Assignment group field.
  4. Select the group that handles this kind of security incident. If no groups are available, leave this field blank.
    You do not have to select an assignment group, but doing so limits the number of users you can assign the request to.
  5. Click the reference lookup icon beside Assigned to.
  6. Select the agent to handle the security incident.

    If one was selected, the users available in this field are limited to the users who are in the Assignment group.

  7. Click Update.
    If email notifications are on for that agent, an email notification is automatically sent to the assigned agent.