Approve or reject requests in the Vulnerability Manager Workspace
Approve or reject requests that are submitted by remediation owners.
Before you begin
Roles required:
| Approval type | Approval levels required | Approver roles | Additional information |
|---|---|---|---|
| False positive approvals | One | - sn\_vul.false\_positive\_approver granular role for vulnerable items \(VITs\). - sn\_vul.app\_false\_positive\_approver role for application vulnerable items \(AVITs\) - sn\_vul\_container.false\_positive\_approver role for container vulnerable items \(CVITs\) - sn\_vulc.false\_positive\_approver for configuration test results Or Approvers are required to be in the False Positive Approver user group. | - |
| Exception approvals \(deferrals\) | Two | - One approver is required in the Approver - Level 1 group - One approver is required in the Approver - Level 2 group | An exception request for a record or remediation task is approved by using a default, two-level approval workflow. The exception request requires two levels of approvers. After the request is approved by the level 1 approver, it’s sent on to the second-level approver and is then visible in approver 2's queue. |
| Unassign approvals | One approver is required in the Approver – Level 1 group | - sn\_vul.unassign\_approver for AVITs and VITs - sn\_vul\_container.unassign\_approver for CVITs - sn\_vulc.unassign\_approver for configuration issues \(CIs\) | Note: By default, an approval configuration is provided and an unassign approval group is created. Users (Unassign Approver - Level 1) of this group can approve the request. This group contains an unassign approver role, sn_vul.unassign_approver, by default. You can modify or create a new group and update the approval configuration. To configure approval rules, navigate to the respective Approval Rules module, select any of the following approval rules, and navigate to the approval configuration in the Approval Configurations tab:
|
| Risk reduction approvals | Two | - One approver is required in the Approver - Level 1 group - One approver is required in the Approver - Level 2 group | The approval flow for risk reduction is same as the exception approvals \(deferrals\). |
See Vulnerability Response personas and granular roles and Assign the Vulnerability Response persona roles using Setup Assistant for more information about assigning persona roles to users and users to groups.
Note: Add users to the approval groups before you submit approval requests. If you create requests before you add users to the approval groups, the requests might not be visible to those users that have the approval permission.
Procedure
Navigate to Workspaces > Vulnerability Manager Workspace.
If an approver doesn’t have access to the workspace, approvals can be processed at Vulnerability Response > My Approvals in the classic environment.
Select the List view icon (
LIst view icon.\).
The List page is displayed.
In the Approvals filtered list, select Assigned to me.
Locate a request that you want to process and then select the link in the State column.
The Vulnerability State Change Approval record (VCA#) is displayed.
Choose one of the following options to approve or reject the request.
| Option | Description |
|---|---|
| Click the Details tab, enter text in the Comments field, and click Reject | - A message is displayed indicating that there’s a rejected approval for the Vulnerability State Change Approval record. - The state on the Vulnerability State Change Approval record transitions to Rejected. - The state on the remediation task or the record remains the same. - The Vulnerability State Change Approval record is no longer displayed on your Approvals list view in the workspace. |
| From either the Request or Details tabs, click Approve | - A message displays indicating that the Vulnerability State Change Approval record is approved. - The state on the remediation task or the record transitions to Deferred. - Active records on the remediation tasks transition to Deferred. - The Vulnerability State Change Approval record is no longer displayed on your Approvals list view. |
Parent Topic:Monitoring and managing vulnerable items and test results in the Vulnerability Manager Workspace