Generate a Pattern allowlist

task australia Updated Sep 10, 2026 1 min read generate-patterns-allow-list.md
Raw file servicenow.com

Generate an allowlist for a selection of patterns, to configure the patterns permitted to run on an agent.

Before you begin

Ensure that the following plugins are installed on your instance:

  • Discovery (com.snc.discovery)
  • Pattern Designer Enhancements (com.sn_itom_pde)
  • Pattern Allowlist Generator available as part of Agent Client Collector for Visibility Content 1.5.0 (202512)

Role required: discovery_admin or agent_client_collector_admin

Procedure

  1. Navigate to All > Pattern Designer > Patterns allowlist for ACC.

    The Pattern Allowlist Generator page appears.

  2. Select the type of pattern selection in the Pattern Selection section.

    • All patterns: The allowlist generates for all patterns on the agent.

    • Specific patterns: The allowlist generates on the agent only for the patterns you select.

      After selecting this option, choose the patterns from which you want the allowlist to be generated.

  3. Select Generate Allowlist.

  4. Select Copy to copy the generated allowlist.

  5. Append the copied allowlist into the existing check-allow-list.json allowlist on the agent.

    The patterns specified in the allowlist are permitted to run on the agent.

    The allowlist's default location is:

    • Windows: C:\ProgramData\ServiceNow\Agent Client Collector\check-allow-list.json
    • Linux: /etc/servicenow/agent-client-collector/check-allow-list.json Note: To generate allowlist for commands nested within EVAL() in a pattern step, ensure the Pattern Designer Enhancements plugin is v3.9.1 or above.

Parent Topic:Deploying Agent Client Collector on endpoints

Search documentation
Search document titles and file paths on the australia branch