availability

Package: Invicti AppSec Core (on-demand), Invicti AppSec Enterprise (on-premise, on-demand)

Shadow user assignment

Shadow users are an optional feature that automatically redirects issue assignments when the primary assignee is unavailable. When Invicti AppSec assigns issues to a user through an integrated issue manager, the system checks the user's status. If the user is marked as Away or Deactivated, the issue is automatically delegated to their designated shadow user.

How the delegation chain works

The system follows a cascading chain of up to five levels:

1. If the original user is unavailable (Away or Deactivated), the issue routes to their shadow user.
2. If the shadow user is also unavailable, the chain continues to that shadow user's shadow user.
3. This process repeats up to five levels deep.

Example: If John's shadow is Mary, Mary's shadow is Derek, and Derek's shadow is Alice — an issue assigned to John would go to Mary first. If Mary is also unavailable, it goes to Derek. If Derek is unavailable, it reaches Alice.

note

If a circular reference exists (for example, Mary is John's shadow and John is Mary's shadow), the system assigns the issue to the earliest active user in the chain. If no active shadow user is found, the system assigns the issue to the original user.

Assign a shadow user

You can assign a shadow user when adding a new user or editing an existing user:

1. Select Users and teams > Users from the left side menu.
2. Click the username of the user you want to edit, or click Add User to create a new one.
3. In the Shadow User field, select a user from the dropdown. Select None to remove an existing shadow user assignment.
4. Click Save.

---

Need help?

Invicti Support team is ready to provide you with technical help. Go to Help Center