Add an exception approver

---
title: Add an exception approver
description: Add users to the approver groups so that you can request an exception.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/vulnerability-response/add-exception-approver.html
release: brazil
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 3
breadcrumb: [Configure Exception Management for Vulnerability Response, Additional Vulnerability Response setup and configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Add an exception approver

Add users to the approver groups so that you can request an exception.

## Before you begin

Persona and granular roles are available to help you manage what users and groups can see and do in the Vulnerability Response application. For an initial assignment of the persona roles in Setup Assistant, see [Assign the Vulnerability Response persona roles using Setup Assistant](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vr-assign-personas_SA.md). For more information about managing granular roles, see [Manage persona and granular roles for Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/vr_manage_granular-roles.md).

Role required: sn\_vul.exception\_approver

## About this task

Upto Vulnerability Response v14.0, an exception request for a vulnerable item or remediation task is approved using the default two-level approval workflow. The request must be approved by two levels of approvers.

**Note:** Upto Vulnerability Response v14.0, if there's no first-level approver, an exception can't be requested. However, starting from Vulnerability Response v15.0, if you are deploying the VR application for the first time, the flow designer for exception management is enabled by default. If you are already using the workflow, you can update to the flow designer. In both cases, you cannot change it back to workflow. To configure approval rules for exception management and false positive, see [Configure approval rules for Exception Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/vulnerability-response/exception-mgt-approval-rules.md).

## Procedure

1.  Navigate to **All** > **User Administration** > **Groups**.

2.  In the Name column, search for **Exception**, and click **Exception Approver - Level 1**.

    **Note:** Starting from Vulnerability Response v12.8.1, you can use the system properties provided in the base system for exception approvals via workflow in the System Properties \[sys\_properties\] table. So, when an exception or false positive request is raised via workflow, it’s sent for approval to the group IDs defined in the system property. Navigate to **All** > **System Properties** and select **sn\_vul.exception\_approver\_L1**, **sn\_vul.exception\_approver\_L2**, or **sn\_vul.false\_positive\_approver\_group** to change the property value.

3.  On the Group Exception Approver - Level 1 form, click the Group Members related list.

4.  Click **New** to create a list.

5.  On the form, fill in the fields.

<table id="table_m23_4gt_5lb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

User ID

</td><td>

Unique identifier for the user.

</td></tr><tr><td>

First name

</td><td>

User's first name.

</td></tr><tr><td>

Last name

</td><td>

User's last name.

</td></tr><tr><td>

Title

</td><td>

User's job title. Enter a title or job description, or select one from the list.

</td></tr><tr><td>

Department

</td><td>

User's department.

</td></tr><tr><td>

Password

</td><td>

Password assigned to the user. This password can be permanent or temporary.

</td></tr><tr><td>

Password needs reset

</td><td>

Option to enable the user to reset the password to ensure security.

</td></tr><tr><td>

Locked out

</td><td>

Option to lock the user out of the instance and terminate all the user's active sessions. The system prevents users with the admin role from locking themselves out.

</td></tr><tr><td>

Active

</td><td>

Option to make this user active. Only you can see an inactive user in these areas:-   Lists of users
-   Selection list on reference fields \(magnifying glass icon\)
-   Auto-complete list that appears when you type into a reference field


</td></tr><tr><td>

Web service access only

</td><td>

Option to designate this user as a non-interactive user.

</td></tr><tr><td>

Internal Integration User

</td><td>

Option to designate this user as an internal integration user.

</td></tr><tr><td>

Email

</td><td>

User's email address.

</td></tr><tr><td>

Language

</td><td>

User's preferred language.

</td></tr><tr><td>

Calendar integration

</td><td>

Calendar used to manage the work schedule. For example, Outlook.

</td></tr><tr><td>

Time zone

</td><td>

Time zone for this user's location.

</td></tr><tr><td>

Date format

</td><td>

User's preferred format for dates.

</td></tr><tr><td>

Business phone

</td><td>

User's business phone.

</td></tr><tr><td>

Mobile phone

</td><td>

User's mobile phone.

</td></tr><tr><td>

Photo

</td><td>

Photo that you can upload by clicking on **Click to add...**.

</td></tr></tbody>
</table>6.  Click **Submit**.

7.  Repeat steps 1–5 to create an Exception Approver - Level 2.

    The approver must navigate to **Vulnerability Response** &gt; **My Approvals** and approve requests.

    **Note:** To approve an exception for GRC: Policy and Compliance Management, see [Policy and Compliance Management optional setup](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/governance-risk-compliance/policy-compliance-optional-steps.md).