Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

On-Call scheduling in Security Incident Response

Use On-Call Scheduling in Security Incident Response to view and manage shifts for your analysts.

With the On-Call Scheduling feature, you can view and manage shifts, approve or reject absence requests. You can also manage notification preferences, delivery channels, escalation trigger rules, and policies for your group.

Key features for sn_si.manager/rota_manager

  • View the on-call schedule including any gaps and time-off requests for your group.
  • Approve or reject time-off requests.
  • Review and manage gaps and conflicts.
  • Provide, replace, or delete coverage and delete time-off requests.
  • Create a shift and add or delete members to the shift.
  • View escalation, group, and performance reports.

Key features for sn_si.analyst/oc_read

  • View your on-call schedules and see the other members of your shift.
  • Submit a time-off request and refer another member of the group to cover your shift.
  • Specify your availability and your preferred contact methods.
  • View the members and escalation details for a shift.

Documentation for On-call Scheduling

For detailed information on configuring and using On Call Scheduling features, refer to the IT Service Management On-Call Scheduling documentation.

Parent Topic:Configuring SIR Workspace

Related topics

Set up view of SIR Records

Configure SI design time investigation

SIR Workspace Related Records

Define the new Risk Score Calculator Rules

Configure Shift Handover

Security Incident Response conference call integration

Configure report templates in Security Incident Response

Category management in Security Incident Response

View and update Security Incident Response system properties

Create quick filters for Security Incidents and Response Tasks lists

Timeline in Security Incident Response Workspace