Symantec Endpoint Detection and Response considers whitelisted items trustworthy and takes no action when endpoints access them.
If you create a Whitelist policy through EDR cloud console in the Cloud environment, that policy only applies to your Cloud-registered agents. If you want to create a whitelist policy that applies to endpoints that are managed by an appliance, you must create Whitelist policies for that specific appliance.
In the EDR appliance console, you must have the Admin role or Controller role to create policies. In the EDR cloud console console, you must Site Administrator, Customer Administrator, or Allow Remediation permissions.