---
title: Auto-promote CIs
description: Edit the JSON string in the autoPromoteFields \[sn\_sec\_cmn.autoPromoteFields\] system property so your configuration item \(CI\) lookup rules auto-promote all the Security Operations CMDB CIs to matching entries in the \[cmdb\_ci\] table.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/auto-promote-ci.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Create a Vulnerability Response CI lookup rule, Advanced Vulnerability Response configuration tasks, Vulnerability Response implementation, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Auto-promote CIs

Edit the JSON string in the **autoPromoteFields** `[**sn\_sec\_cmn.autoPromoteFields**]` system property so your configuration item \(CI\) lookup rules auto-promote all the Security Operations CMDB CIs to matching entries in the \[cmdb\_ci\] table.

## Before you begin

Role required: sn\_vul.vulnerability\_admin

## About this task

The system property type is ’string’ and requires you enter a JSON string. This property is activated by default and promotes matching CIs while running the CI lookup rules.

Custom-written lookup scripts might return child table records from the script. For this property, the **\_autoPromoteCI** function in the **CIIdentify Script Include** takes the CI returned by the lookup script and automatically traverses the relationships to arrive at the **cmdb\_ci** entry and return it.

To override the auto-promotion logic, that is, to add or update new CI classes, add the JSON object in the Value field in the `[**sn\_sec\_cmn.autoPromoteFields**]` system property.

## Procedure

1.  Enter `sys_properties.list` in the left navigation bar.

2.  Select **Enter**.

3.  Locate the `[**sn\_sec\_cmn.autoPromoteFields**]` system property and select the record to open it.

    Default string:

    ```
    {
     "dscy_switchport":"cmdb_ci",
     "cmdb_ci_network_adapter":"cmdb_ci",
     "cmdb_ci_nic":"cmdb_ci",
     "cmdb_ci_ip_address":"nic"
    }
    ```

4.  In the **Value** text box, edit the string using the default pairing format.

5.  Select **Update**.

    This value is used by CI Lookup Rules during the next import.


**Parent Topic:**[Create a Vulnerability Response CI lookup rule](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/vulnerability-response/create-ci-identifier-rules.md)