---
title: Allow Policy
slug: kronpam-agent-reference-guide-3-6-0/allow-policy
description: Learn how to use the block policy feature efficiently to control which applications can run on selected endpoints and whether they can launch child processes. Ensure smooth application functioning by configuring this feature with caution. Get all the nece
docTags: 
createdAt: 2023-06-20T14:54:20.000Z
---

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Z3tZiLR2fb75wkHKu5z_j_image.png" size="72" width="725" height="352" position="center" caption="Allow Policy" alt=" Agent Selection" showCaption="true"}

If the users select allow as the policy action, configured users or users’ groups will be allowed to run the configured application in the selected endpoints. In this step, the user is expected to choose the endpoints. These endpoints could be agents or agent groups that are grouped earlier in the agent dashboard. 

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lISywXpg5UzqNI9IXP1S5_image.png" size="72" width="711" height="428" position="center" caption="Allow Policy " alt="End User UI Config" showCaption="true"}

In the last step, users will be configuring child processes. When an application is launched it may be required to run some child processes to make the application function. Since not every application requires this and it could be used as an attack vector, system admins can decide whether this application will be permitted to call and execute child processes or not. If this is not configured with care, it can prevent applications from running normally.