---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Create an Explicit Block policy

# Create an Explicit Block policy {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Stop a user, a department, or everyone in your organization from using a specific AI agent, model, or domain.

## Before you begin

To enforce a block on an external system, confirm the corresponding connector is already configured. External systems include cloud AI agents and devices running Agent Client Collector (ACC). See [Configuring security connections](https://www.servicenow.com/docs/07H58FaIPRdJHGp8iWlPbA "Connect AI Control Tower to the platforms where your AI agents run and to your identity provider so that policies and AI agent containment using kill switch protocol can act on agents wherever they're hosted.").

Role required: sn_ai_governance.ai_steward

## About this task

An Explicit Block policy stops a user, a department, or everyone in your organization from using a specific AI agent, model, or domain. Once published, it stays in effect until you delete it; there's no pause or in-between state.

## Procedure

1. Navigate to AllAI Control TowerHomeGovernPolicies.
2. Select Create policy.
3. Enter a name and description of this policy.
4. In the Policy type section, select An explicit block.
5. In the Block section, define who's blocked.  
   Select User to block specific people, or Department to block everyone in a department. Leave the search field empty to apply the block to everyone.
6. In the Block section, define what they're blocked from using.

   | Option | Description |
   | AI agent | 1. In the What field, select AI agent. 2. Identify the AI agent that you want to block by building a condition using a field, an operator, and a value. For example, Asset \| is \| ACME Agent. 3. Combine multiple conditions with and or or, or select Add group for another set of conditions. |
   | Model | 1. In the What field, select Model. 2. Enter one or more models in a comma-separated list. |
   | Domain | 1. In the What field, select Domain. 2. Enter one or more domains in a comma-separated list. |
   |-|-|

7. **Optional:** In the Block section, add a follow-up action.  
   A follow-up fires only when the policy actually blocks an attempt, not just because it's published.
   1. Select +Add follow-up.
   2. Select Notify.
   3. Search or enter the user to notify.
   {#gov-pol-create-explicit-block-policy__substeps_vf2_nwr_jkc}
8. Review the policy, then select Publish.

## Result

The policy takes effect at every enforcement point it applies to. If enforcement depends on an agent installed on a device, such as ACC, the block takes effect when the policy syncs to that
device.

## What to do next

Confirm the policy is working as expected by reviewing the policy enforcement activity. For details, see [Reviewing policy enforcement in AI Control Tower](https://www.servicenow.com/docs/USwzNQvSNreevbfxQFT1CQ "Review policy activities and execution results.").

To change who or what a published policy blocks, edit it. For details, see [Edit an Explicit Block policy](https://www.servicenow.com/docs/QqB1YRf29k0GsAh4ClzYGQ "Change who an Explicit Block policy blocks, what they're blocked from using, or its follow-up actions, without recreating the policy."). Alternatively, clone the policy to try a variant without changing the original, then delete the original once your clone is confirmed working, if you no longer need it. For details, see [Clone a policy](https://www.servicenow.com/docs/k8X5swLRBx7HSd0vw6aHhw "Start a new policy using an existing policy as a template.").

*[\>]: and then