Skip to content
Use › Unified Security Exposure Management › Security Operations
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Unified Approvals View

The approval process in Security Exposure Management for vulnerability and compliance exceptions is unified to simplify workflows, improve visibility, and streamline actions for Approvers.

The Approvals landing page provides a comprehensive view of all approval requests initiated by remediation owners to view specific requests, with navigation widgets such as:

  • All approvals: Consolidated list of all approvals, including exception, false positive, risk reduction, and unassignment (e.g., a single view of everything awaiting your approval).
  • Overdue approvals: Approvals that have crossed their due date (e.g., a risk reduction request that was supposed to be approved yesterday).
  • Pending approvals: Approvals awaiting action beyond today across all request types.
  • Today’s approvals: Approvals due for action today (e.g., an unassignment request expiring by end of day).
  • Exception approvals: Approvals specifically for exception requests (e.g., a request to allow delayed patching of a high-risk vulnerability).
  • False positive approvals: Approvals for requests flagged as false positives (e.g., scanner incorrectly reporting a vulnerability on a host).
  • Expiring exceptions:
  • Exception extensions
  • Repeated rejections

Each approval request contains interactive links that provide access to detailed information, including Record Reference for findings, Request Type, Request Number, Risk Rating, Remediation Status, Approval Assignment Group, and Current State. You can also access click-able links to view details related to associated findings. See Configure Approval List and Form View.

When opening a finding record (e.g., VIT, AVIT, CVIT, Test Results), users can view detailed attributes such as state, remediation status, assignment group, information about the finding, relevant detections, change approvals, and requested approvals.

You can defer a finding or remediation task directly from its respective form in the Security Exposure Management workspace. Once submitted, the request is sent for approval. This unification offers:

View the requester, purpose, impacted services, approval levels, and comments all in one place.

Approvers can approve or reject requests directly within the same record. See Reviewing an Approval Request.

Every comment and approval action is recorded and attributed.

You can use generative AI to streamline the approval process for exceptions and false positive requests with AI-driven recommendations. For more information, see: Generate approval recommendations with generative AI

All requests including pending, overdue, or completed, are easy to locate and manage in the single view. Links to legacy approval requests are available for items that remain in the old flow during the migration period.

  • Add an approver
    Users added to the False Positive, Unassign, Exception Approver group can approve findings and remediation tasks (VULs). Granting a false positive, unassign, exception is a single-level approval process.
  • Configure Approval List and Form View
    Optimize the review and approval process by configuring list views and form layouts for unified exception and approval management.
  • Reviewing an Approval Request
    Review an approval request form to perform the required action according to the role assigned to you.
  • Review questionnaire to approve or reject requets
    Approvers review the questionnaire and make approval/rejection decisions based on the provided information. Remediation owners must fill out the questionnaire before submitting for approval, if questionnaire configuration was selected during exception rule configuration..

Parent Topic:Using Unified Security Exposure Management