Open Ops tatersecurity.com

TATER Ops — ITIL 4 Standard Field Coverage

TATER Ops captures all 46 industry-standard help-desk ticket fields from ITIL 4 Incident Management, ServiceNow ITSM, Jira Service Management, Zendesk, and Freshservice. This page is the complete field reference, including which fields are auto-filled by the server.

Why this matters

Most modern ITSM platforms converge on a common set of help-desk ticket fields drawn from ITIL 4 best practices. When TATER Ops is evaluated against an existing ServiceNow / Jira SM / Zendesk deployment, the question is always “does it capture the same data points?” This page documents that yes — every standard field is supported, with the same naming conventions and same value sets where possible.

Complete field coverage matrix

Fields are grouped by ITIL category. Auto-fill means the server populates the value at create or status-transition time without explicit caller input.

1. Identity & Classification (8)

FieldAPI nameIndustry aliasNotes
Ticket IDidNumber / Sys IDAuto-generated UUID at create
TitletitleShort Description / SummaryRequired, max 300 chars
DescriptiondescriptionLong Description / DetailsOptional, max 10,000 chars
CategorycategoryClassificationRequired; org-customizable per Ops Customization
SubcategorysubCategorySubcategory / TypeOptional
Symptom CodesymptomCodeIssue Type / SymptomFree-form classification of observed problem
TagstagsLabelsUp to 20 tags, 60 chars each
Source / ChannelsourceOrigin / Contact MethodAuto-filled from caller channel: Portal, AI, API, Monitoring, etc. Override with explicit value.

2. ITIL Prioritization (5)

FieldAPI nameIndustry aliasValues
PrioritypriorityPriorityCritical, High, Normal, Low (or org custom)
ImpactimpactImpactHigh, Medium, Low (or 1-4)
UrgencyurgencyUrgencyHigh, Medium, Low (or 1-4)
SeverityseveritySeverityCritical, High, Medium, Low, Informational (security-incident context)
TiertierEscalation Level1, 2, 3, 4 — defaults to 1

ITIL pattern: Priority is calculated from Impact × Urgency in many ITSM tools. TATER captures all three independently so callers can either set Priority directly or derive it from the matrix.

3. People & Routing (8)

FieldAPI nameIndustry alias
Reporter / CallerrequesterEmail / requesterNameCaller / Requester / Customer
Affected User / Alt ContactcontactEmail / contactNameSubject / Affected User
Assigned ToassignedToEmail / assignedToNameOwner / Assignee
Assignment Group / TeamteamIdGroup / Team
Watchers / SubscriberswatchersCC / Watchers / Followers

4. State & Lifecycle (10) — with ITIL auto-fill

FieldAPI nameAuto-fill behavior
Status / StatestatusCaller-controlled; org-customizable per category
Major Incident flagisMajorIncidentCaller-controlled; surfaces escalation pattern
Created / OpenedcreatedAt / createdByAuto-filled at create
First Response AtfirstResponseAtAuto-filled on first status change away from Open
UpdatedupdatedAt / updatedByAuto-filled on every save
Resolved AtresolvedAtAuto-filled when status enters Resolved/Closed/Cancelled from open
Closed AtclosedAtAuto-filled when status enters Closed/Cancelled
Reopened AtreopenedAtAuto-filled when status leaves Resolved/Closed back to active
Reopen CountreopenCountAuto-incremented on each reopen
Archived AtarchivedAtAuto-filled on soft-delete (DELETE handler)

5. SLA Tracking (4)

FieldAPI nameNotes
Due Date / Resolution SLAdueDate / resolutionDueAtBoth supported; resolutionDueAt is the explicit ITIL alias
First Response SLAfirstResponseDueAtSeparate SLA target for response time
First Response BreachedfirstResponseBreachedBoolean — defaults to false on create
SLA BreachedslaBreachedResolution SLA breach flag — defaults to false

6. Resolution & Cause (5)

FieldAPI nameStandard values
Resolution CoderesolutionCodeResolved · Duplicate · WontFix · NoActionNeeded · Cancelled · WorkaroundProvided · PendingVerification · Deferred
Resolution NotesresolutionNotesFormal closure summary, max 5,000 chars
Root Cause CoderootCauseCodeHumanError · ConfigChange · HardwareFailure · SoftwareBug · NetworkIssue · ThirdPartyOutage · CapacityIssue · SecurityIncident · TrainingGap · ProcessGap · Unknown · Other
Root Cause NotesrootCauseNotesFree-form, max 5,000 chars
Symptom CodesymptomCodeFree-form; see Identity section above

7. Organizational Context (3)

FieldAPI nameNotes
Site / LocationsitePhysical or logical site
DepartmentdepartmentReporter's department
Cost CentercostCenterBilling code — useful for chargeback / showback

8. Customer Satisfaction (3)

FieldAPI nameNotes
CSAT ScorecsatScore1-5 scale
CSAT CommentcsatCommentReporter feedback after closure, max 2,000 chars
CSAT Submitted AtcsatSubmittedAtTimestamp

9. Linked Records (8)

FieldAPI nameNotes
Parent TaskparentTaskIdTree relationship to parent ticket
Linked ProblemlinkedProblemIdITIL Problem record (distinct from parent)
Linked Change RequestlinkedChangeRequestIdFirst-class ITIL Change link
Linked IncidentslinkedIncidentIdsSibling ticket array, e.g. for major-incident parent/child
Linked CI / ServicelinkedTaterEntityType / linkedTaterEntityIdConfiguration item link to TATER controls / risks / vendors / policies / wiki / etc.
External RefsexternalRefsArray of {system, id, url} — ADO, Jira, ServiceNow, etc.

10. Visibility & Effort (3)

FieldAPI nameStandard values
VisibilityvisibilityInternal (default) · CustomerVisible · Public
Time Spent (minutes)timeSpentMinutesLogged effort — useful for billing / capacity
AttachmentsattachmentsUp to 50 file references at the task level (separate from comment-level attachments)

11. Approval Workflow (4)

FieldAPI nameNotes
Approval ChainapprovalChainMulti-step approver list with per-step status
Approval StatusapprovalStatusnone / pending / approved / rejected
Current Approval StepcurrentApprovalStep0-indexed pointer into chain
Approver ActionsapprovalChain[].actedAt/By/noteAudit trail per approver decision

12. Metadata & Context (5)

FieldAPI nameNotes
TenanttenantIdCosmos partition key
OrganizationorganizationIdMSP multi-tenancy
Channel (audit)viaweb / mcp / copilot / claude / api / cron — agent attribution
Comment CountcommentCountAuto-incremented as comments are added
Custom FieldscustomFieldsPer-category custom fields, max 30 keys, values capped

Industry comparison — what's covered

The following industry standards were reviewed; TATER Ops covers every documented field from each:

  • ITIL 4 Incident Management — full identity, classification, prioritization (impact/urgency/priority), state lifecycle, SLA tracking, resolution, root cause, CSAT
  • ServiceNow ITSM — sys_id, short_description, description, category, subcategory, impact, urgency, priority, severity, state, assignment_group, assigned_to, opened_at, resolved_at, closed_at, reopen_count, location, cost_center, work_notes, comments, sla_due, breached, etc.
  • Jira Service Management — summary, description, request type, priority, status, reporter, assignee, organization, due date, time tracking, attachments, watchers, customer satisfaction, sla fields, custom fields
  • Zendesk — subject, description, type, priority, status, requester, assignee, organization, group, tags, custom fields, satisfaction rating, channels, ticket forms, time tracking
  • Freshservice — subject, description, category, sub-category, item, priority, urgency, impact, status, requester, agent, group, due date, fr_due_at, source, custom fields

Auto-fill behavior summary

The following fields are populated by the server and don't require explicit caller input:

  • id — UUID assigned at create
  • source — defaulted from via channel: web→Portal, mcp/copilot/claude→AI, api→API, cron→Monitoring (caller can override)
  • tier — defaults to 1
  • visibility — defaults to Internal
  • reopenCount — starts at 0; auto-incremented on each reopen
  • timeSpentMinutes — starts at 0; caller adds as work is logged
  • firstResponseBreached / slaBreached — default false; caller or downstream cron updates as SLAs elapse
  • firstResponseAt — auto-filled on first status change away from Open
  • resolvedAt — auto-filled when status enters Resolved/Closed/Cancelled from open state
  • closedAt — auto-filled when status enters Closed/Cancelled
  • reopenedAt — auto-filled when status leaves Resolved/Closed back to active
  • createdAt / updatedAt / archivedAt — auto-filled by handlers

API reference

All fields above are accepted via POST /api/tasker/tasks (create) and PUT /api/tasker/tasks/:id (update). The full request body shape is documented in api/src/functions/taskerTasks.tsTaskerTask interface. Validation enforces length caps and value-set constraints per field.

See also: Ops Customization, Public Intake, Workflow Templates, Workflow Automation, External Ticketing Integration.