---
title: Allow
slug: kronpam-agent-reference-guide/allow
description: Learn how to use the block policy feature efficiently to control which applications can run on selected endpoints and whether they can launch child processes. Ensure smooth application functioning by configuring this feature with caution. Get all the nece
docTags: 
createdAt: 2023-06-20T14:54:20.000Z
---

![ Agent Selection](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Z3tZiLR2fb75wkHKu5z_j_image.png "Block Policy")

If the users select allow as the policy action, configured users or users’ groups will be allowed to run the configured application in the selected endpoints. In this step, the user is expected to choose the endpoints. These endpoints could be agents or agent groups that are grouped earlier in the agent dashboard. 

![End User UI Config](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/lISywXpg5UzqNI9IXP1S5_image.png "Block Policy ")

In the last step, users will be configuring child processes. When an application is launched it may be required to run some child processes to make the application function. Since not every application requires this and it could be used as an attack vector, system admins can decide whether this application will be permitted to call and execute child processes or not. If this is not configured with care, it can prevent applications from running normally.