---
title: Add existing attributes to a GRC workflow state
description: Add existing Governance, Risk, and Compliance state model attributes to add special capabilities to workflow steps without custom code. Attributes control features like approval requirements, report generation, and Open Security Controls Assessment Language \(OSCAL\) file exports for specific workflow states.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-continuous-authorization-and-monitoring-workspace/configure-state-model-attributes.html
release: australia
product: GRC: Continuous Authorization and Monitoring Workspace
classification: grc-continuous-authorization-and-monitoring-workspace
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [GRC state model configuration, CAM workflow configuration, Continuous authorization and monitoring tasks in the CAM Workspace, Use, Continuous Authorization and Monitoring, Governance, Risk, and Compliance]
---

# Add existing attributes to a GRC workflow state

Add existing Governance, Risk, and Compliance state model attributes to add special capabilities to workflow steps without custom code. Attributes control features like approval requirements, report generation, and Open Security Controls Assessment Language \(OSCAL\) file exports for specific workflow states.

## Before you begin

With CAM, you get the following UI button attributes:

-   Generate ATO Letter: Generates Authority to Operate \(ATO\) letter document.
-   Generate Executive Summary: Generate an Executive Summary document.
-   Generate OSCAL SSP: Generate an OSCAL format System Security Plan \(SSP\).
-   Generate POAM: Generate a Plan of Action and Milestones \(POA&M\) document.
-   Generate OSCAL AP: Generate an Assessment Plan in OSCAL format.
-   Generate OSCAL AR: Generate an Assessment Results in OSCAL format
-   Generate SAP: Generate a Security Assessment Plan \(SAP\) document.
-   Generate SAR: Generate a Security Assessment Report \(SAR\) document.
-   Generate SSP: Generate a System Security Plan \(SSP\) document.
-   Required approval: Requires approval before proceeding to the next step.

You also get the following related list button attributes:

-   Required Information Type Actions: Enables Add and Remove buttons in Information Types related list
-   Required Baseline Actions: Enables buttons in Baseline Controls related lists \(Add, Remove, Mark as Not Applicable, Inherit, Create Hybrid, Return to Baseline\)
-   Required Overlay Actions: Enables Add and Remove buttons in Overlays page

In addition, you get the following UI page attributes:

-   Required Overlay Page: Displays the Overlays UI page
-   Required Authorization Documents Page: Displays the Authorization Documents page

**Note:** To configure state model attributes with the CAM specific attributes, perform the tasks in this topic. To create a new state model attribute, see [Create a new state model attribute](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-continuous-authorization-and-monitoring-workspace/configure-new-state-model-attributes.md).

Role required: sn\_irm\_cont\_auth.admin

## Procedure

1.  Navigate to **All** > **Continuous Authorization and Monitoring** > **Administration** > **GRC State Models**.

2.  Open the state model record that contains workflow states.

3.  On the **GRC workflow states** related list, select the workflow state for which you want to add the existing attribute.

4.  On the selected workflow state record, select **State Model Attributes** tab.

5.  To add the existing attributes, select **Edit**.

6.  Select attribute from the **Collection** list.

7.  Select the right arrow icon \(>\) to move selected attribute to the **State Model Attributes List** on the right.

8.  To remove an attribute, select attribute in the **State Model Attributes List** on the right panel and select the left arrow icon \(<\).

9.  Select **Save** to save the attribute.


## Result

State model attributes are configured and control the functionality available at specific workflow steps. You can see the appropriate buttons and features based on the attributes assigned to each workflow state.

**Parent Topic:**[GRC state model configuration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-continuous-authorization-and-monitoring-workspace/cam-create-state-model.md)