---
sourceDocument: Australia Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/intelligent-experiences

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Working with Arc policy rules

# Working with Arc policy rules {#ariaid-title1}

Release version: Australia  
Updated October 23, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Add and customize the rules that control what Arc can do for the users a policy covers.

Each rule you add to a policy changes one part of the default behavior of Arc, such as which tools it can use or which actions need approval.

* Tool gates and approval patterns work together to decide which actions wait for a person's approval. Before you create tool gates and approval patterns, see [Action approval flow in ServiceNow Arc](https://www.servicenow.com/docs/T0e_8ThPpDfsWplGWEy3GQ "Tool gates, approval patterns, and auto approval decide whether each action Arc attempts runs, waits for a person's approval, or is blocked.").
* Network, file type, sandbox, and connector scope rules limit what an action can reach once it runs.
* Capability overrides change which features Arc offers users.

{#gov-pol-working-with-arc-policy-rules__ul_ty3_2lq_zkc}

## Choosing a rule type {#gov-pol-working-with-arc-policy-rules__rule-types}

{#gov-pol-working-with-arc-policy-rules__table_arc_rule_types__entry__2}

| Goal | Rule type |
|-|-|
| Block a tool, or send its calls for review | [Tool gate](https://www.servicenow.com/docs/doDbmIRD5riOsHGlAt6bLw "Decide how ServiceNow Arc handles a tool, such as the shell or an MCP server tool, by letting it run, blocking it, or sending its calls for review.") |
| Require approval for specific commands, or let trusted commands run without a prompt | [Approval pattern](https://www.servicenow.com/docs/GfKNwZ2CO8QYj4fbj_2A3g "Pause destructive or outbound commands for a person's decision, or let trusted routine commands run without a prompt, by matching them with an approval pattern.") |
| Open or close a network destination | [Network rule](https://www.servicenow.com/docs/li_80zAwWy~TuGgTK_5xQg "Open a destination that ServiceNow Arc needs to reach, or block one it shouldn't, by adding a network rule for the users a policy covers.") |
| Keep the agent from reading or changing certain types of files | [File type rule](https://www.servicenow.com/docs/wju9Nwl3yAtacxhuEhKBSA "Keep sensitive file types out of reach of ServiceNow Arc by setting whether the agent can read, write, or not access files with specific extensions.") |
| Limit which paths the sandbox can read or write, or which programs in it can reach the network | [Sandbox rule](https://www.servicenow.com/docs/kMR~__KeZMmQaFT0KQMxQw "Restrict the reach of ServiceNow Arc agent commands by limiting the paths, binaries, system calls, and environment variables the sandbox can use.") |
| Limit what the agent can do through a connector, such as sending email | [Connector scope](https://www.servicenow.com/docs/e2a0ZLew_yryyaW_6NGG_Q "Limit what ServiceNow Arc can do through a connector, such as reading mail without sending it, by granting only the connector operations a team needs.") |
| Turn a feature on or off, or change a limit, such as auto mode or how long a task can run | [Capability override](https://www.servicenow.com/docs/sYJcq3IVKPYGjSoyAv6Umg "Turn a ServiceNow Arc feature on or off, or change a limit, for the users a policy covers without changing the default for anyone else.") |
[Table 1. Rule types by goal]

{#gov-pol-working-with-arc-policy-rules__table_arc_rule_types}