--- title: Add affected users to existing cases description: You can add affected users to one or more existing cases. After the user records have been added to cases, you can use Security Case Management to analyze the data. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/add-users-to-cases-sir.html release: australia topic_type: task last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Affected users in cases, Case creation from security artifacts, Security Case Management, Threat Intelligence, Enterprise security case management applications, Security Operations] --- # Add affected users to existing cases You can add affected users to one or more existing cases. After the user records have been added to cases, you can use Security Case Management to analyze the data. ## Before you begin The Threat Intelligence plugin must be activated to use Security Case Management. Role required: sn\_ti.case\_user\_write ## About this task You need to navigate to the user records you want to add to existing cases. ## Procedure 1. Navigate to **All** > **User Administration** > **Users**. The list of user records opens. 2. In the list, select one or more users that you want to add to existing cases. **Note:** If you select multiple users, the selected user records are added to each of the selected cases. 3. From the **Actions on selected items** drop-down list, select **Add to Security Case**. The **Add to Security Case** dialog box opens and displays the cases assigned to you. \[Omitted image "add-user-to-existing-case.png"\] Alt text: Add uses to existing cases 4. Select the cases into which you want to add the selected users. 5. Click **Add**. A message indicates that the selected records have been added to the cases, along with a link to the cases in Security Case Management. **Parent Topic:**[Affected users in cases](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/cases-from-affected-users.md) **Related topics** [Create a case from affected users]()