Some fields such as a domain list in a CASB policy are greyed out and cannot be modified.
CloudSOC does not allow you to change fields in a policy after the policy that has been activated.
This is working as designed. Clone the existing policy and make the appropriate changes. The old policy can in-activated or deleted.