ServiceNow Ticket Types
ServiceNow Ticket Types: Incidents, Requests, Problems, Changes, Cases and Tasks
Introduction
ServiceNow ticket types are the foundation of structured service management. When a user reports that an application is unavailable, requests a laptop, identifies a recurring production defect, asks for a system change, or submits an HR inquiry, these activities should not automatically be treated as the same kind of ticket.
ServiceNow provides different record types and management processes for different business situations. In IT service management, common records include Incidents, Requests, Problems, Changes, and Tasks. In other ServiceNow applications, organizations also work with Cases, such as customer service cases or HR cases. ServiceNow’s current documentation describes cases as records used to capture and manage customer or employee requests and the activities required to resolve them.
For an implementation consultant, this distinction matters because ticket classification drives much more than the screen a user sees. It can determine:
- Which team receives the work
- Which SLA applies
- What workflow starts
- Which approvals are required
- What information must be captured
- How the ticket is reported
- Which downstream systems are called
- Whether the record represents an interruption, fulfillment activity, root-cause investigation, or planned change
A poorly designed ticket model can therefore create operational problems even when the ServiceNow configuration itself technically works.
Why Ticket Classification Matters
Consider a simple example.
An employee says:
“I cannot access the payroll application.”
That could be an Incident.
Another employee says:
“I need access to the payroll application.”
That is generally a Request or request fulfillment process.
If the IT team discovers that hundreds of users are losing access because of a recurring identity synchronization defect, the underlying investigation may become a Problem.
If the organization needs to modify the identity integration to permanently resolve the issue, that modification may require a Change.
The same business situation can therefore generate several related records.
A useful consultant-level model is:
User issue → Incident → Problem → Change
while:
User need → Request → Catalog Item → Fulfillment Tasks
The actual implementation can vary depending on the organization’s ServiceNow applications, workflows, and governance.
Key ServiceNow Ticket Types
The following table provides a practical distinction.
| Ticket Type | Primary Purpose | Typical Example | Main Question |
|---|---|---|---|
| Incident (INC) | Restore service | Payroll application unavailable | How do we restore service quickly? |
| Request / Requested Item (REQ/RITM) | Fulfill a standard need | Request laptop or application access | What does the user need fulfilled? |
| Problem (PRB) | Identify and address root cause | Recurring payroll interface failures | Why does this keep happening? |
| Change Request (CHG) | Control a modification | Deploy a permanent integration fix | What controlled change should we make? |
| Task | Perform a unit of work | Validate configuration or approve activity | What specific work must be done? |
| Case | Manage a service inquiry or case | Customer complaint or HR inquiry | How do we manage the complete service interaction? |
| HR Case | Handle employee service matters | Payroll inquiry or benefits question | How should the employee request be resolved? |
The important point is that these are not simply different names for the same ticket.
1. ServiceNow Incident
An Incident represents an interruption to a service or a degradation in service that requires restoration.
The primary objective of Incident Management is generally restoring normal service as quickly as practical, rather than performing a complete root-cause investigation.
Real-world example
A company uses Oracle Fusion Cloud HCM for payroll-related operations.
At 9:15 AM, several employees report that they cannot access the employee self-service portal.
The service desk creates an incident:
Incident: INC0012458
Short Description:
Employees unable to access HCM employee portal
Category:
Application
Service:
Oracle HCM
Impact:
High
Urgency:
High
Assignment Group:
HR Applications SupportThe support team investigates the immediate issue and restores access.
The incident can then be resolved.
What should an Incident contain?
Typical information includes:
- Caller
- Short description
- Description
- Service
- Category
- Subcategory
- Configuration item
- Impact
- Urgency
- Priority
- Assignment group
- Assigned to
- Work notes
- Additional comments
- Resolution information
Consultant tip
Do not turn Incident Management into a root-cause investigation process.
If an incident is resolved through a temporary workaround but the underlying problem continues to occur, consider linking the incident to a Problem record.
2. ServiceNow Request
A Request generally represents something a user wants from the organization rather than an unexpected interruption.
For example:
“I need access to Oracle Fusion Financials.”
The user is not necessarily reporting a failure. They are asking the organization to provide something.
This distinction is particularly important when implementing Service Catalog.
A typical flow is:
Employee
↓
Service Catalog
↓
Request (REQ)
↓
Requested Item (RITM)
↓
Catalog Tasks
↓
FulfillmentExample
An employee submits:
Request: Oracle Fusion Financials Access
The catalog item might collect:
- Employee name
- Job role
- Business unit
- Required responsibility
- Environment
- Access duration
- Manager approval
- Application owner approval
The request can then create fulfillment tasks.
For example:
REQ0010789
└── RITM0010922
├── Task: Manager Approval
├── Task: Security Validation
└── Task: Provision Oracle RoleRequest vs Incident
This is one of the most common ServiceNow interview questions.
| Scenario | Likely Record |
|---|---|
| User cannot access application | Incident |
| User wants new application access | Request |
| User’s existing access suddenly stopped | Incident |
| User requests additional access | Request |
The wording “I need something” versus “something is broken” is a useful starting point.
3. ServiceNow Problem
A Problem focuses on the underlying cause of one or more incidents.
The distinction is:
Incident = restore service
Problem = investigate the underlying cause
Example
Suppose an organization experiences an Oracle Integration Cloud interface failure every Monday morning.
The service desk receives:
INC1001
INC1008
INC1015
INC1024All four incidents involve the same integration.
The support team identifies a recurring issue and creates:
PRB001002
Recurring failure in employee-to-payroll integrationThe Problem record can be used to:
- Investigate the root cause
- Document findings
- Identify affected incidents
- Define a workaround
- Identify a permanent fix
- Coordinate with technical teams
- Create a Change when the permanent fix requires modification
Problem management flow
Multiple Incidents
↓
Pattern Identified
↓
Problem Created
↓
Root Cause Analysis
↓
Workaround
↓
Permanent Fix
↓
Change Request
↓
Implementation
↓
Problem ClosureConsultant tip
A common implementation mistake is creating a Problem for every Incident.
That defeats the purpose of Problem Management.
A Problem is more appropriate when there is an underlying cause, recurring pattern, significant impact, or known defect that deserves separate investigation.
4. ServiceNow Change Request
A Change Request represents a controlled modification to an IT service, application, infrastructure component, configuration, or other managed environment.
For example:
“Modify the OIC integration to handle a new employee termination status.”
That is not simply an incident resolution.
The organization is intentionally modifying a production system.
Therefore, the change process may include:
- Risk assessment
- Impact assessment
- Implementation plan
- Testing plan
- Backout plan
- Approval
- Scheduling
- Implementation
- Validation
- Closure
Example Change
CHG001245
Short Description:
Deploy OIC employee termination mapping enhancement
Configuration Item:
Employee Integration Platform
Risk:
Medium
Implementation:
Deploy tested integration package
Validation:
Process sample employee termination transaction
Backout:
Restore previous integration versionChange vs Incident
This distinction is critical.
Suppose an Oracle Fusion integration fails.
The support team restarts the integration and service is restored.
That activity may be part of Incident Management.
But suppose the integration code must be modified to prevent recurrence.
The modification may require a Change Request.
Therefore:
Incident → restore
Change → modify
5. ServiceNow Task
A Task represents a specific unit of work.
Tasks are often used underneath broader records.
For example:
Change
├── Development Task
├── Testing Task
├── Deployment Task
└── Validation TaskSimilarly, a request may generate fulfillment tasks:
Request
└── Requested Item
├── Approval Task
├── Security Task
└── Provisioning TaskTasks are therefore extremely important when designing workflows.
Real-world example
An employee requests Oracle Fusion access.
The request should not simply be assigned to one person with a long description saying “Please process.”
Instead, the workflow could create:
- Manager approval
- Application owner approval
- Security review
- Provisioning activity
- Validation
Each activity can be represented by an appropriate task or workflow activity.
6. ServiceNow Case
Case is another important ServiceNow record concept, particularly outside traditional ITSM.
ServiceNow describes a customer case as a primary entity for customer service interactions, capturing customer requests, issues, communications, activities, and resolution information.
For Customer Service Management, cases can represent different types of customer issues, requests, and service interactions. ServiceNow also supports case types that can define different processes and data requirements.
Example
A customer contacts a company and reports:
“My invoice contains an incorrect charge.”
The organization may create a customer service Case rather than an ITSM Incident.
The case can contain:
- Customer
- Account
- Product
- Contract
- Entitlement
- Communication history
- Activities
- Tasks
- Resolution
This is an important distinction for consultants working across ServiceNow products.
7. ServiceNow HR Case
ServiceNow HR Service Delivery uses HR Cases to manage employee inquiries and HR service requests.
Current ServiceNow documentation states that HR cases can be created for areas such as HR systems, benefits, payroll, performance management, talent acquisition, reporting, and time and expense.
Example
An employee asks:
“Why was my salary deduction different this month?”
This is generally an HR service interaction and may become an HR Case.
The case can be associated with:
- Employee
- HR service
- Center of Excellence
- Assignment group
- Priority
- SLA
- HR tasks
- Child cases
- Approvals
ServiceNow documentation also notes that HR cases can have associated HR tasks or child HR cases.
This makes HR Case Management particularly useful for structured employee-service processes.
Ticket Relationships in a Real Implementation
The most useful way to understand ServiceNow ticket types is to look at how they work together.
Consider a production payroll integration.
Stage 1 — Incident
Users report:
“Payroll data is not being transferred.”
Service desk creates:
INC001245Stage 2 — Problem
The support team discovers that the failure has happened repeatedly.
They create:
PRB000421and link the incidents.
Stage 3 — Root Cause
The technical team determines that an authentication mechanism used by the integration is expiring unexpectedly.
Stage 4 — Change
A configuration or code modification is required.
The team creates:
CHG001897Stage 5 — Tasks
The change generates:
Implementation Task
Testing Task
Deployment Task
Validation TaskStage 6 — Closure
After successful deployment:
- Change is completed
- Problem is updated with root cause
- Incidents are resolved or closed according to the organization’s process
This relationship provides traceability from user impact to permanent remediation.
Ticket Types and ServiceNow Integrations
Ticket classification becomes even more important when ServiceNow integrates with Oracle Fusion, OIC, Azure, AWS, monitoring systems, identity platforms, or other enterprise applications.
A typical architecture might look like:
Monitoring / Employee / Customer
|
v
ServiceNow
|
Ticket Classification
|
+-------+-------+
| | |
INC REQ CASE
| | |
v v v
OIC Approval Business
| | Process
v v
Oracle Fusion / Enterprise SystemsFor example, an integration monitoring platform could automatically create an Incident when an OIC integration fails.
An integration team could then use ServiceNow APIs to:
- Create the Incident
- Populate the integration name
- Populate the error message
- Assign the appropriate group
- Include correlation identifiers
- Update the ticket after remediation
The exact integration architecture depends on the organization’s ServiceNow and Oracle integration design.
Real Implementation Scenarios
Scenario 1 — Oracle Fusion Access
An employee needs access to Oracle Fusion Financials.
Correct business interpretation
This is a Request, not an Incident.
A catalog item can collect:
- Employee
- Responsibility
- Business unit
- Environment
- Manager
- Business justification
The workflow can then generate approval and provisioning tasks.
Scenario 2 — Oracle Integration Failure
An OIC integration stops processing employee records.
Correct interpretation
This is an Incident because an existing service has been interrupted.
If the issue repeatedly occurs, a Problem can be created.
If the permanent solution requires modifying the integration, a Change can be created.
This gives the organization three separate but connected views:
Incident → Immediate restoration
Problem → Root cause
Change → Controlled modificationScenario 3 — Employee Payroll Inquiry
An employee asks why a payroll deduction appears different.
This is an HR service interaction.
An HR Case can be created and assigned to the appropriate HR service team. ServiceNow documentation shows payroll as one of the supported HR case categories.
The case may then generate an HR task if another team needs to perform a specific activity.
Scenario 4 — Customer Product Complaint
A customer reports that a delivered product is defective.
For a CSM implementation, the organization may create a Case.
The case could include:
- Customer account
- Product
- Asset
- Contract
- Entitlement
- Customer communications
- Internal activities
- Resolution
ServiceNow’s CSM model supports case types and case activities to structure customer-service work.
How to Decide Which Ticket Type to Use
A consultant can use the following decision model.
Question 1: Is something broken?
If yes, consider:
Incident
Question 2: Is the user asking for something standard?
If yes, consider:
Request
Question 3: Is there a recurring or underlying cause?
If yes, consider:
Problem
Question 4: Does the solution require modifying a controlled environment?
If yes, consider:
Change
Question 5: Is the work part of a larger process?
If yes, consider:
Task
Question 6: Is this a customer-service interaction?
Consider:
Case
Question 7: Is this an employee-service interaction?
Consider:
HR Case
The exact classification should always follow the organization’s implemented ServiceNow application and process model.
Common Implementation Challenges
1. Treating every record as an Incident
This is one of the most common design problems.
If every request becomes an Incident, reporting becomes misleading.
For example:
Application Access Request = Incident
Laptop Request = Incident
Password Reset Request = IncidentThe organization may end up reporting artificially high incident volumes.
2. Confusing Incident and Problem
A Problem is not simply a high-priority Incident.
An Incident focuses on service restoration.
A Problem focuses on understanding and addressing the underlying cause.
3. Creating Changes Without Linking the Original Issue
If a change fixes a recurring incident, the records should be appropriately related.
Otherwise, six months later, an auditor or support engineer may ask:
“Why was this production change implemented?”
and have difficulty finding the business reason.
4. Over-customizing Ticket Types
Organizations sometimes create too many custom ticket types.
For example:
Application Incident
Database Incident
Network Incident
Oracle Incident
Payroll Incident
Integration IncidentSome of these may be better represented using existing records plus:
- Category
- Subcategory
- Service
- Configuration item
- Assignment group
- Application-specific fields
Custom record types should have a clear business justification.
5. Poor Assignment Design
Correct classification is only useful if the ticket reaches the correct team.
For example:
Oracle HCM Incident
↓
HR Applications Supportwhile:
Oracle Access Request
↓
Identity & Access ManagementRouting rules should therefore be designed together with ticket classification.
Best Practices for ServiceNow Ticket Types
1. Define a classification matrix
Before configuring workflows, create a simple matrix.
| Business Situation | Record | Assignment | SLA |
|---|---|---|---|
| Service interruption | Incident | Support Team | Incident SLA |
| Standard access request | Request | Fulfillment Team | Request SLA |
| Recurring defect | Problem | Problem Team | Problem Process |
| Production modification | Change | Change Owner | Change Process |
| Customer inquiry | Case | Customer Service | Case SLA |
| Employee inquiry | HR Case | HR Team | HR SLA |
The exact SLA and ownership values should be defined during implementation.
2. Design ticket relationships before workflows
Do not start by configuring Flow Designer or Business Rules.
First document:
Record Type
↓
Lifecycle
↓
Assignment
↓
Approval
↓
Child Records
↓
SLA
↓
ClosureThen configure the automation.
3. Keep business terminology simple
End users do not necessarily need to understand every ServiceNow technical table.
Instead of asking an employee:
“Do you want to create an Incident or Request?”
the portal can ask:
“What do you need help with?”
The system can determine the underlying record type based on the selected service.
4. Use standard functionality before customization
Before creating custom tables, investigate whether the requirement can be handled using:
- Existing ServiceNow record types
- Service Catalog
- Case types
- Categories
- Assignment rules
- Flow Designer
- SLAs
- Task relationships
- Existing application functionality
This normally produces a more maintainable implementation.
5. Design integrations around business events
For an Oracle Fusion or OIC integration, do not simply send every error to ServiceNow.
Define which technical events represent:
- Incident
- Warning
- Business exception
- Integration failure
- Security event
- Retry condition
- Permanent failure
For example, an automatically retried transient OIC error may not need to create a ServiceNow Incident.
Frequently Asked Interview Questions
1. What is the difference between an Incident and a Request?
An Incident represents an interruption or degradation of an existing service.
A Request represents a user asking for something to be provided or fulfilled.
2. What is the difference between an Incident and a Problem?
Incident Management focuses on restoring service.
Problem Management focuses on identifying and addressing the underlying cause of incidents.
3. What is the purpose of a Change Request?
A Change Request provides controlled governance for modifying an environment, service, application, configuration, or infrastructure.
4. Can an Incident be linked to a Problem?
Yes. Multiple incidents can be associated with a Problem when they have a common underlying cause.
5. Can a Problem generate a Change?
Yes. When the permanent resolution requires a controlled modification, the Problem can lead to a Change Request.
6. What is a Task in ServiceNow?
A Task represents a unit of work. Tasks can be associated with broader processes such as requests, changes, cases, and HR cases.
7. What is an HR Case?
An HR Case is used to manage employee HR inquiries and service requests. Examples include payroll, benefits, HR systems, talent management, and workforce administration.
8. What is a Customer Service Case?
A customer service Case captures and manages a customer issue, request, service interaction, communications, activities, and resolution.
9. Is every ServiceNow ticket an Incident?
No.
ServiceNow implementations use different record types depending on the business process. Incidents are only one category.
10. Why is ticket classification important?
Classification influences workflow, assignment, SLA, approvals, reporting, security, automation, and integration behavior.
11. Can one ticket create multiple tasks?
Yes. A parent process can generate multiple tasks for different teams or activities.
12. What happens if a Request is incorrectly created as an Incident?
The record may follow the wrong SLA, assignment process, workflow, reporting category, and escalation model.
Expert Consultant Tips
When designing ServiceNow ticket types for an enterprise implementation, think in terms of business intent, not just database tables.
Ask:
- What happened?
- Is service currently unavailable or degraded?
- Is the user asking for something?
- Is the issue recurring?
- Does a permanent solution require a system modification?
- Does another team need to perform a separate activity?
- Is this an employee-service, customer-service, or IT-service interaction?
These questions normally lead to a much cleaner design.
For Oracle-centric environments, also establish a clear integration ownership model.
For example:
Oracle Fusion
↓
OIC
↓
Monitoring
↓
ServiceNow Incident
↓
Support Group
↓
Problem
↓
Change
↓
Permanent FixThis provides traceability across the application landscape rather than treating ServiceNow as an isolated ticketing application.
FAQs
What are the main ServiceNow ticket types?
Common ServiceNow record types include Incidents, Requests, Problems, Changes, Tasks, Cases, and HR Cases. The exact records available depend on the ServiceNow products and applications implemented in the organization.
Is a ServiceNow Request the same as an Incident?
No. An Incident normally represents an interruption or degradation of an existing service, while a Request generally represents a standard user need that must be fulfilled.
Can one business issue involve multiple ServiceNow ticket types?
Yes. For example, a recurring Incident can lead to a Problem, and the permanent resolution of that Problem may require a Change. Related tasks can then be created to perform individual implementation activities.
Summary
Understanding ServiceNow ticket types is essential for both ServiceNow administrators and enterprise integration consultants. The distinction between Incident, Request, Problem, Change, Task, Case, and HR Case is based primarily on the business purpose of the record.
The simplest practical model is:
Incident → Something is broken
Request → I need something
Problem → Why does this keep happening?
Change → We need to modify something
Task → Someone needs to perform specific work
Case → Manage a customer/service interaction
HR Case → Manage an employee HR service interactionIn a real implementation, these records should not be designed independently. Their relationships, assignment rules, SLAs, workflows, approvals, security, reporting, and integrations should be designed as one operating model.
For Oracle environments, this becomes particularly valuable when ServiceNow is integrated with Oracle Fusion Cloud and OIC. A well-designed model can connect an employee or business-user issue to the service desk, technical investigation, integration support, controlled change, and eventual resolution.
For additional Oracle Cloud reference material, refer to the Oracle Cloud Applications documentation and the current Oracle Fusion Cloud Time and Labor documentation. Oracle’s 26A Time and Labor documentation is also available through the 26A readiness documentation.