---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Viewing patch data and patch data rollup for the Vulnerability Response Patch Orchestration integration with Microsoft SCCM

# Viewing patch data and patch data rollup for the Vulnerability Response Patch
Orchestration integration with Microsoft SCCM {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 3 minutes to read

Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of Viewing Patch Data and Patch Data Rollup for the Vulnerability Response Patch Orchestration Integration with Microsoft SCCM

This content provides guidance on how to view patch data and patch rollup information within the Vulnerability Response Patch Orchestration integration with Microsoft SCCM.
It outlines the necessary roles, the workspace navigation for accessing this information, and details on how to manage patches effectively.
Show full answer Show less  

## Key Features

* **Roles Required:** To configure and schedule patches, users need the *snvulpatchorch.configurepatch* role. For viewing patch information, the *snvulpatchorch.readpatch* role is required, which is inherited with *snvul.remediationowner* and *snvuln.vulnerabilityanalyst* roles.
* **IT Remediation Workspace:** Access patch data from the Home view and List view, including scorecards for preferred solutions and records of Vulnerable Items (VIs) and patches.
* **Vulnerability Manager Workspace:** View patches via Home view on watch topics and List view on remediation efforts, with specific tabs for patch data and scheduled dates.
* **Patch Update Records:** Provide comprehensive data including vulnerability solutions, remediation status, and associated devices and patch requests.

## Key Outcomes

By following the guidance provided, customers can effectively manage and view patch information, track remediation efforts, and utilize performance analytics for better visibility of patch statuses. This ensures timely updates and actions can be taken to address vulnerabilities within their systems.  
Patch data and patch rollup data, as well as vulnerability information and remediation
status of your vulnerabilities are displayed on records in your instance.

## Viewing patch data in the Vulnerability Response Workspaces {#vr-mspatch-rollup__section_wh3_vqd_3sb}

Roles required:

* sn_vul_patch_orch.configure_patch role to configure and schedule patches
* sn_vul_patch_orch.read_patch to view (read only) patch information on records. This role is inherited with the sn_vul.remediation_owner and sn_vuln.vulnerability_analyst roles that are required for the IT Remediation and Vulnerability Manager Workspaces
{#vr-mspatch-rollup__ul_nky_qds_lsb}

In the IT Remediation Workspace, you can view the patches:

* On the Home view, where you can click scorecards to view records for Preferred solutions on VIs, Vulnerable CIs, and Preferred Patches on VIs.
* On the List view, where you can view all Patch Update records (VPUs) from the Patches links, and the vulnerable items (VITs) that are assigned to you that have patches.

{#vr-mspatch-rollup__ul_ptc_yqd_3sb}

You can schedule patches from the following records:

* From Patch Update (VPU)
* Remediation task (RT)
* Discovered Item (SDI) records

{#vr-mspatch-rollup__ul_amf_vsd_3sb}

In the Vulnerability Manager Workspace, you can view patches:

* From the Home view on watch topics, where you can view preferred and potential patches, Patch scheduled dates, and, if the patch has been downloaded all on the Vulnerable Items tab.
* From the List view on remediation efforts, where you can view patch data on VI records from theVulnerable Items tab.

{#vr-mspatch-rollup__ul_okg_5rd_3sb}

From the classic environment view, navigate to AllVulnerability ResponsePatches.

## Patch Update records in the VR Workspaces and in the classic environment view {#vr-mspatch-rollup__section_xvm_b2s_lsb}

Patch data and patch rollup data and status are displayed on records in your instance.
Patch records are included as part of the patch orchestration feature of this integration
with Vulnerability Response. View Patch (VPU) records in Vulnerability Response
Workspaces from the List view in the IT Remediation Workspace. Patch Update records in both
the classic environment and Vulnerability Response Workspaces include the following data:

* Vulnerability solution data and information from patch vendors imported by the Vulnerability Solution Management application.
* Source Remediation Status that includes the total number of devices that have a given vulnerability that can be fixed by a patch. Additionally, it also includes and any devices that are missing updates.
* Remediation Status that includes % of VIs remediated and the total VIs that have a patch as a preferred patch.
* Associated Devices, Vulnerable Items, Patch Deployments and Patch Requests on the Related Links on records in the class view. This data is displayed on tabs on records in the Vulnerability Response Workspaces.
* Patch Requests that remediation owners have submitted for approval.
{#vr-mspatch-rollup__ul_u4l_l2s_lsb}

## State rollup on vulnerable item records {#vr-mspatch-rollup__section_dvh_14c_3sb}

For more information about state rollup to records, see [Patch data and state rollup for patch orchestration in Vulnerability Response](https://servicenow-prod.fluidtopics.net/aHV5JfQdovyUrcgpYUJ39w "Starting with v16.1 of Vulnerability Response patch data and states are rolled up to Patch Update and other records in the Vulnerability Response application.").

## Records that roll up active VI counts {#vr-mspatch-rollup__section_zld_ypd_3sb}

To avoid rolling up all the patches to all the vulnerabilities, the scheduled job only picks up changes to the active VI count. These count changes and related data are rolled up to the following records in Vulnerability Response:

* VIT
* RT
* Vulnerability solution
* Patch Update
{#vr-mspatch-rollup__ul_u5y_1ms_lsb}

## Viewing data for patches without solutions {#vr-mspatch-rollup__section_t3v_4pd_3sb}

For more information about viewing patches without solutions, see [View patches without solutions in Vulnerability Response](https://servicenow-prod.fluidtopics.net/hr4XKhmE3zraJ1QgDndJfg "Starting with v16.0 of Vulnerability Response, for patches that have no solutions after an import, the system then searches for patch IDs in the vulnerability reference data so that you can view these patches on vulnerability records.").

## Patch data on the Vulnerability Response {#vr-mspatch-rollup__section_mlj_q1q_rsb}

The Vulnerability Management (PA) and CISO dashboards are included with a subscription with
the Performance Analytics for the Vulnerability Response application. If you have a
subscription for Performance Analytics, but do not have a patch orchestration integration
installed, the remediation tab is displayed on the CISO dashboard, but it is not populated
with data.

For the Vulnerability Management (PA) dashboard, navigate to AllVulnerability ResponseOverview. Click the Remediation tab and scroll to the bottom of
the page to view Patch Updates data: patches scheduled and not scheduled, patches missing
their target dates, and weekly counts.

For the CISO Dashboard, navigate to AllVulnerability ResponseCISO Dashboard. With the Overview tab selected, scroll to the bottom of the page to view
Patch Coverage data: Criticality, patches scheduled and not scheduled, and patches missing
their target dates.

For more information about the Vulnerability Response dashboards, see [Using the default Vulnerability Response dashboards](https://servicenow-prod.fluidtopics.net/7CWrXrkODPOWTK5kxwdqUQ "The Vulnerability Response overview dashboard (Vulnerability Management) provides an executive view into vulnerabilities and vulnerable items, helping the Vulnerability Admin pinpoint areas of concern quickly. The Vulnerability Response remediation dashboard (Vulnerability Remediation) allows a remediation specialist to focus on the remediation tasks and vulnerable items they own."), [Patch orchestration with the Vulnerability Response Workspaces](https://servicenow-prod.fluidtopics.net/qhYi4lIn5cGt2G5ombcCNw "You can manage patches and patch deployments for critical vulnerabilities for large groups of your assets with Patch orchestration with Vulnerability Response."), and [Viewing patch orchestration data on the Vulnerability Response dashboards](https://servicenow-prod.fluidtopics.net/d2Kqa8fLzXACQcbCmeFjuQ "Starting with v16.1, you can view patch update data in the classic environment on the dashboards that are included with the Vulnerability Response application.").

*[\>]: and then