Create security tag rules

task brazil Updated Nov 6, 2026 1 min read sem-create-security-tag-rules.md

Security tag rules provide filtering for security tag access.

Before you begin

Security tags added by rules are removed automatically when rule conditions no longer match.
Manual security tags are preserved when automatic tags are applied.
When multi-selection is disabled for a security tag group, only one tag from that group can be applied to a security incident. If a security analyst manually applies a tag and an automatic tagging rule subsequently triggers for a different tag within the same group, the automatic tag overrides the manual tag.
Role required: sn_si.admin

Procedure

Navigate to Workspaces > Security Exposure Management Workspace.
Select Administration in the navigation pane.
Select Review on the Security tags tile.
Security tags are displayed in a list grouped by Security tag groups.
Choose or create a security tag.
In the Security Tag Rules related tab, select New.

Fill in the fields on the form, as appropriate.

Field	Description
Name	The name of the security tag rule.
Security Tag	The security tag to attach to the rule.
Active	Option to turn the security tag on or off.
Description	A description of this rule.

Determine Record Filtering.
Fill in the fields on the form, as appropriate.

Field Description

Use filter group Option to associate the filter group to the rule.

Table The table to contain the rule.

Condition Option to add one or more filter conditions.
Select Submit

Field	Description
Use filter group	Option to associate the filter group to the rule.
Table	The table to contain the rule.
Condition	Option to add one or more filter conditions.

60 lines · 2.2 KB Wrap lines

---
title: Create security tag rules
description: Security tag rules provide filtering for security tag access.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/sem-create-security-tag-rules.html
release: brazil
topic_type: task
last_updated: "2026-11-06"
reading_time_minutes: 1
breadcrumb: [Set up security tag groups and tags, Implement, Unified Security Exposure Management, Security Operations]
---

# Create security tag rules

Security tag rules provide filtering for security tag access.

## Before you begin

-   Security tags added by rules are removed automatically when rule conditions no longer match.
-   Manual security tags are preserved when automatic tags are applied.
-   When multi-selection is disabled for a security tag group, only one tag from that group can be applied to a security incident. If a security analyst manually applies a tag and an automatic tagging rule subsequently triggers for a different tag within the same group, the automatic tag overrides the manual tag.
-   Role required: sn\_si.admin

## Procedure

1.  Navigate to **Workspaces** &gt; **Security Exposure Management Workspace**.

2.  Select **Administration** in the navigation pane.

3.  Select **Review** on the **Security tags** tile.

4.  Security tags are displayed in a list grouped by Security tag groups.

5.  Choose or [create a security tag](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/create-class-group-and-tags.md).

6.  In the **Security Tag Rules** related tab, select **New**.

7.  Fill in the fields on the form, as appropriate.

    |Field|Description|
    |-----|-----------|
    |Name|The name of the security tag rule.|
    |Security Tag|The security tag to attach to the rule.|
    |Active|Option to turn the security tag on or off.|
    |Description|A description of this rule.|

8.  Determine **Record Filtering.**

9.  Fill in the fields on the form, as appropriate.

    |Field|Description|
    |-----|-----------|
    |Use filter group|Option to associate the filter group to the rule.|
    |Table|The table to contain the rule.|
    |Condition|Option to add one or more filter conditions.|

10. Select **Submit**