---
title: Add an exception approver for Application Vulnerability Response
description: Add users to the approver groups so that you can request an exception.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/avr-add-exception-approver.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 2
breadcrumb: [Exception Management in Application Vulnerability Response, Configure Application Vulnerability Response, Configure, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Add an exception approver for Application Vulnerability Response

Add users to the approver groups so that you can request an exception.

## Before you begin

Role required: sn\_vul.app\_exception\_approver

## About this task

An exception request for an application vulnerable item is approved using the default two-level approval flow. The request can be approved by two levels of approvers. Adding users to the first-level group is mandatory. If there are no users in the second level, the request is approved after the first-level approval.

## Procedure

1.  Navigate to **All** > **User Administration** > **Groups**.

2.  In the Name column, search for **Exception**, and click **Application Exception Approver - Level 1**.

    **Note:** Starting from Application Vulnerability Response v12.8.1, you can use the system properties provided in the base system for exception approvals via workflow in the System Properties \[sys\_properties\] table. So, when an exception or false positive request is raised via workflow, it’s sent for approval to the group IDs defined in the system property. Navigate to **All** > **System Properties** and select **sn\_vul.app\_exception\_approver\_L1**, **sn\_vul.app\_exception\_approver\_L2**, or **sn\_vul.app\_false\_positive\_approver\_group** to change the property value.

3.  On the Group Application Exception Approver - Level 1 form, click the Group Members related list.

4.  Click **New** to create a list.

5.  On the form, fill in the fields.

<table id="table_m23_4gt_5lb"><thead><tr><th>

Field

</th><th>

Description

</th></tr></thead><tbody><tr><td>

User ID

</td><td>

Unique identifier for the user.

</td></tr><tr><td>

First name

</td><td>

User's first name.

</td></tr><tr><td>

Last name

</td><td>

User's last name.

</td></tr><tr><td>

Title

</td><td>

User's job title. Enter a title or job description, or select one from the list.

</td></tr><tr><td>

Department

</td><td>

User's department.

</td></tr><tr><td>

Password

</td><td>

Password assigned to the user. This password can be permanent or temporary.

</td></tr><tr><td>

Password needs reset

</td><td>

Option to enable the user to reset the password to ensure security.

</td></tr><tr><td>

Locked out

</td><td>

Option to lock the user out of the instance and terminate all the user's active sessions. The system prevents users with the admin role from locking themselves out.

</td></tr><tr><td>

Active

</td><td>

Option to make this user active. Only you can see an inactive user in these areas:-   Lists of users
-   Selection list on reference fields \(magnifying glass icon\)
-   Auto-complete list that appears when you type into a reference field


</td></tr><tr><td>

Web service access only

</td><td>

Option to designate this user as a non-interactive user.

</td></tr><tr><td>

Internal Integration User

</td><td>

Option to designate this user as an internal integration user.

</td></tr><tr><td>

Email

</td><td>

User's email address.

</td></tr><tr><td>

Language

</td><td>

User's preferred language.

</td></tr><tr><td>

Calendar integration

</td><td>

Calendar used to manage the work schedule. For example, Outlook.

</td></tr><tr><td>

Time zone

</td><td>

Time zone for this user's location.

</td></tr><tr><td>

Date format

</td><td>

User's preferred format for dates.

</td></tr><tr><td>

Business phone

</td><td>

User's business phone.

</td></tr><tr><td>

Mobile phone

</td><td>

User's mobile phone.

</td></tr><tr><td>

Photo

</td><td>

Photo that you can upload by clicking on **Click to add...**.

</td></tr></tbody>
</table>6.  Click **Submit**.

7.  Repeat steps 1–5 to create an Application Exception Approver - Level 2.

    The approver must navigate to **Application Vulnerability Response** &gt; **My Approvals** and approve requests.


**Parent Topic:**[Exception Management in Application Vulnerability Response](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/application-vulnerability-response/avr-exception-management.md)