---
sourceDocument: Brazil Build or modify applications
sourceDocumentLink: https://www.servicenow.com/docs/r/application-development

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Build or modify applications

ft:clusterId :

    - cadev

bundleId :

    - cadev

workflow :

    - Development, Data, and Analytics


---

# Configure

# Configuring Application Runtime Policy {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Configure Application Runtime Policy to automatically approve generated policies, or to require review and manual approval.

## Configuration overview {#configuring-app-runtime-policy__cf-config-parent-checklist}

Application Runtime Policy (ARP) is free and available by default on all production and non-production instances. You don't have to activate a plugin.

When you begin developing an application, ARP is inactive by default. To enable automatic policy generation, you must set ARP to either tracking or enforcing mode from the custom application form.
* **[Opt in to Application Runtime Policy](https://www.servicenow.com/docs/uaA0kXety5X1z~GXG47s8Q)**   
  Enable Application Runtime Policy for an application that's in development by setting the policy mode on the custom application form.
* **[Application Runtime Policy modes](https://www.servicenow.com/docs/~rqS1R~GWk7ESpyopuhr~A)**   
  When enabled, Application Runtime Policy operates in two possible modes: Tracking and Enforcing. Tracking mode automatically allows out-of-scope access attempts, while Enforcing mode automatically blocks out-of-scope access attempts until you review them.