Add 'Allow" option to AppAware, instead of just Block | Voters

Add 'Allow" option to AppAware, instead of just Block

Shane Castro

Please add an "Allow" option to AppAware so that the feature can be used to either block or allow an entire ecosystem instead of just blocking.

Minetta Gould

Thanks for the suggestion! We’d love to learn more about how you’d use an Allow option in AppAware. If you’re open to it, sharing a few example use cases, current roadblocks this would remove, or specific issues you’re running into today would really help us better understand the need and evaluate it alongside other AppAware improvements.

Ron Rozanski

Minetta Gould
Hi — I’ll add my 2 cents here: this would be very useful for our use case!
By corporate policy, our users are allowed to use only two managed GenAI services that IT provides and governs: Microsoft Copilot and Claude. Ideally, we would like to allow these approved services via AppAware, and then block the entire Generative AI category for everything else. However, since “Allow” isn’t available in AppAware, the only way to make this work today is to manually whitelist all required service endpoints. Unfortunately, that has proven to be very unreliable.
As a result, we’re currently leaving the Generative AI category open, and rely on user adherence (...)
Would absolutely LOVE to see this implemented.

Minetta Gould

Ron Rozanski: Thanks for the use case—appreciate the information! Very helpful 💖