---
sourceDocument: Brazil Build or modify applications
sourceDocumentLink: https://www.servicenow.com/docs/r/application-development

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Build or modify applications

ft:clusterId :

    - cadev

bundleId :

    - cadev

workflow :

    - Development, Data, and Analytics


---

# Configure a ServiceNow Arc agent policy

# Configure a ServiceNow Arc agent policy {#ariaid-title1}

Release version: Brazil  
Updated September 29, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Add tool
gates, approval patterns, network rules, sandbox rules, capability overrides, connector scopes, and file type rules to a policy to control what Arc can do for the users the policy applies to.

## Before you begin

Create the policy. For more information, see [Create a ServiceNow Arc agent policy](https://www.servicenow.com/docs/e8cJgEs0xIwIy0M6LLsBOg "Create a policy to define what ServiceNow Arc can do, which actions need human approval, and which actions are blocked.").

Role required: sn_app_arc.admin

## About this task

Each tab on a policy record links existing rule records to the policy. Add only the components you need. The number on each tab shows how many records are linked to the policy.

You can't edit or delete the Default Policy, or add rules to it. To change its behavior, create a policy with a lower priority number.

When you use a policy to override the Default Policy, add only the rules you want to change. Anything you don't add keeps coming from the Default Policy.

You can also manage policies and their rules in AI Control Tower. For more information, see [Manage Arc agent policies in AI Control Tower](https://www.servicenow.com/docs/c7IVasEHoEUya3OETLq9tw "Create and manage Arc agent policies and their rules in AI Control Tower, so you govern Arc in the same place as the rest of your AI systems.").

## Procedure

1. Navigate to AllServiceNow ArcPoliciesArc Agent Policy.
2. Open the policy you want to configure.
3. Add a tool gate.
   1. Select the Policy Tool Gates tab, and then select New.
   2. In the Tool Gate field, select the tool gate.
   3. **Optional:** In the Domain field, select the domain.
   4. Select Submit.
4. Add an approval pattern.
   1. Select the Policy Patterns tab, and then select New.
   2. In the Approval Pattern field, select the approval pattern.
   3. **Optional:** In the Domain field, select the domain.
   4. Select Submit.
5. Add a network rule.
   1. Select the Policy Network Rules tab, and then select New.
   2. In the Network Rule field, select the network rule.
   3. **Optional:** In the Domain field, select the domain.
   4. Select Submit.
6. Add a sandbox rule.
   1. Select the Policy Sandbox Rules tab, and then select New.
   2. In the Sandbox Rule field, select the sandbox rule.
   3. **Optional:** In the Domain field, select the domain.
   4. Select Submit.
7. Add a capability override.
   1. Select the Capability Overrides tab, and then select New.
   2. In the Capability field, select the capability.
   3. In the Override Value field, enter the value for the capability.
   4. **Optional:** In the Description field, enter a description of the override.
   5. **Optional:** In the Domain field, select the domain.
   6. Confirm that Active is selected.
   7. Select Submit.
8. Add a connector scope.
   1. Select the Policy Connector Scopes tab, and then select New.
   2. In the Connector Scope field, select the connector scope.
   3. Select Active.  
      The Active check box is cleared by default. If you don't select it, the connector scope doesn't take effect.
   4. **Optional:** Select Approval gate to require user approval before each action that uses the scope.
   5. **Optional:** In the Domain field, select the domain.
   6. Select Submit.
9. Add a file type rule.
   1. Select the Policy File Type Rules tab, and then select New.
   2. In the File Type Rule field, select the file type rule.
   3. **Optional:** In the Domain field, select the domain.
   4. Select Submit.
10. Select Update.
{#configure-cowork-agent-policy__steps-configure-policy}

## Result

The policy includes the components you added, and Arc enforces them for every user that the policy's user criteria covers.

*[\>]: and then