---
title: Create a Security Operations user-defined escalation group
description: Escalate a security incident to any group associated with the incident using Escalations.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/create-user-defined-escalation-group.html
release: australia
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Security Operations user-defined escalation, Security Operations common functionality, Security Operations]
---

# Create a Security Operations user-defined escalation group

Escalate a security incident to any group associated with the incident using Escalations.

## Before you begin

Role required: sn\_si.admin

## Procedure

1.  Navigate to **All** > **Security Operations** > **Groups** > **Escalations**.

2.  Select **New**.

3.  Fill in the fields on the form, as appropriate.

    |Field|Description|
    |-----|-----------|
    |Number|Escalation incident number \(field is auto-generated\).|
    |Initial group|Select group this security incident belongs to.|
    |Escalation group|Select group to escalate the security incident to.|

    \[Omitted image "EscalationGroup.png"\] Alt text: Escalation

4.  Select **Submit**.

    An escalation group is available for all security incidents in the initial group. You can create multiple groups.


**Parent Topic:**[Security Operations user-defined escalation](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/user-defined-escalation.md)