---
title: Creating an Advanced Policy from an Event
slug: kronpam-agent-reference-guide-3-9-0/creating-an-advanced-policy-from-an-event
createdAt: 2026-10-12T13:07:38.110Z
---

You create an advanced application policy directly from an event, without opening the **Advanced Policy** page. Kron PAM fills the application name and the agent of the policy with the values of the event.

To create a policy from an event:

1. On the **Application Event Inbox** page, click the actions button of the application.
2. In the **Event Details** window, click the policy button of the row that you want to create the policy for.
3. Enter a name in the **Policy Name** field.
4. Select **User Group** or **User**, and then select the user groups or the users that the policy applies to.
5. Select **Allow**, **Block**, or **Elevate** as the policy action, and then click **NEXT**.

6.       Select **Allow** or **Block** for **Child Group Process** to define whether the application runs child processes. 

7.       Click **SAVE**.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/7Q5Rhh1DHNFxqlNH-Cezc_image.png "Figure – Policy information and policy action of a new advanced policy")



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/IO02el88TMmWgwLkmvkno_image.png "Figure – Child process configuration of a new advanced policy")

:::hint{type="info"}
When the event is produced by an existing advanced policy, Kron PAM opens that policy for editing instead of creating a new one.
:::