---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Turn on client access control for your instance

# Turn on client access control for your instance {#ariaid-title1}

Release version: Brazil  
Updated October 26, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Set a system property so that AI stewards can turn on access management and create client access policies for MCP servers.

## Before you begin

Role required: aig_admin

## About this task

Client access control is off by default. While it's off, the Access management policy category doesn't appear on MCP server records, and AI Gateway doesn't limit clients to specific tools on any MCP server.

## Procedure

1. In the navigation filter, enter <kbd class="ph userinput">sys_properties.list</kbd>.
2. Search for and open the sn_awh_config.gateway_access_control_enabled property.
3. In the Value field, enter <kbd class="ph userinput">true</kbd>.
4. Select Update.

## Result

The Access management policy category appears on the Policies sub-tab of each MCP server's AI Gateway tab. Access management stays off for each server until an
AI steward turns it on.  
Important:  
If you later set the property to <kbd class="ph userinput">false</kbd>, access management is turned off for all MCP servers connected through AI Gateway, and clients can use any active tool again. Setting the property back to <kbd class="ph userinput">true</kbd> doesn't turn access management back on. An AI steward must turn it on again for each server.

## What to do next

To start limiting clients on an MCP server, see [Create a client access policy](https://www.servicenow.com/docs/A2ofdHKeiKbWTVDRxaPH8w "Grant one client access to specific tools on an MCP server.") and [Turn access management on or off for an MCP server](https://www.servicenow.com/docs/EfIcaTxNIHRzz5vjec6~Yg "Turn on access management to limit each client to the tools that its policies grant, or turn it off to let every client use all active tools.").