---
sourceDocument: Zurich Governance, Risk, and Compliance
sourceDocumentLink: https://www.servicenow.com/docs/r/zurich/governance-risk-compliance

 Release :

    - zurich

ft:locale :

    - en-US

ft:publication_title :

    - Zurich Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Request policy exception

# Request a policy exception through Service Portal {#ariaid-title1}

* Release version: Zurich
* 
* Updated July 31, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Your employees and business users within your company can request a policy exception
through the ServiceNow®
Service Portal.

## Before you begin

Role required: sn_compliance.user, sn_grc.business_user, sn_grc.business_user_lite, sn_grc_emp_user.grc_employee

## Procedure

1. Navigate to AllService PortalService Portal Home.
2. In the screen header, navigate to GRCMy Policy Exceptions to view all policy exceptions that you requested.
3. Click New Policy Exception.
4. On the form, fill in the fields.  
   Complete the [Policy Exception
   form](https://www.servicenow.com/docs/bP9io~0ThSyA0Jb91XYnCQ "Use the Employee Center to request exceptions for policies, control objectives, controls, or issues by specifying the reason of exception on a particular list of the systems, applications, networks, or entities for which the exception applies."). Specify what the policy exception is for and select appropriate policy, control objective, or issue. This question is for you to identify the appropriate source type.

   When you select a control objective, the
   Impacted controls tab appears, where you can
   select controls associated to the control objective. You can also search and
   select an entity.

   Select Control to associate
   multiple controls from different control objectives. This option supports
   your policy exception for multiple controls objectives, instead of creating
   multiple policy exceptions that could be applied on multiple
   controls.

   If you are creating a policy exception from GRCMy Policy Acknowledgements, then What is the exception for? field
   auto-populates the value as Policy. The name of the policy also appears in
   the Policy field.

   In
   Issue field, you can search by the description
   and select the appropriate issue.
5. Click Submit.  
   If you raise a policy exception from Service Portal and if verification rules
   are not configured, then the policy exception moves to the Analyze state.
   However, if verification rules are configured for the policy exception, then
   the policy exception moves to the New state and the verification approval
   process is triggered. As verification rules are configured the approver is
   required to verify the policy exception and approve it, only then the policy
   exception moves to Analyze state.

*[\>]: and then