---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/it-operations-management

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Generate and ACC allow list

# Generate an Agent Client Collector allow list {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Specify the checks to be included in the list of checks that are enabled to run on the agent.

## Vorbereitungen

Role required: agent_client_collector_admin

## Warum und wann dieser Vorgang ausgeführt wird

The default allow list includes all validated checks, and is included in the base system policies. If the allow list cannot be read correctly, no checks run on the agent.

## Prozedur

1. Navigate to AllAgent Client CollectorCheck Definitions.  
   The Check Definitions page appears.
2. In the Related Links section at the bottom of the page, click Generate allow list.  
   Hinweis:  
   Alternatively, you can click a check definition or check instance record and click Generate allow list to generate a complete allow list.

   The Agent Client Collector Command Allow-list Generator page appears, with the list of checks scanned from the Command field of the check instance records.

   The values appear with the following attributes:
   {#acc-generate-allow-list__table_kzq_xh2_ylb__entry__2}

   | Attribute | Description |
   |-|-|
   | exec | The executing command. |
   | args | Possible argument strings. |
   | skip_arguments | Boolean. Determines whether to verify that the argument was added to the allow list. * true: Skips argument validation and checks only for illegal characters, specifically \|;\\\<\>\&'$() * false: Executes argument validation to ensure that the argument is included in the allow list. If it is not, the command cannot execute. {#acc-generate-allow-list__ul_i1f_m32_ylb} |
   [Tabelle : 1. Command attributes]

   {#acc-generate-allow-list__table_kzq_xh2_ylb}
3. Copy the entries you want to include in the allow list and add them to the agent's check-allow-list.json file, either manually or using an automation tool.  
   The location of this file is indicated in the allow-list parameter of the agent's acc.yml file.