---
title: "Configure Self-service"
slug: "self-service-how-to-configure"
updated: 2026-11-06T17:30:48Z
published: 2026-11-06T17:30:48Z
canonical: "docs.senhasegura.io/self-service-how-to-configure"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure Self-service

Turn on Self-service so users can request roles, access policies, and credentials from the Self-service panel. You choose which request types users see and who approves them.

## Requirements

- A user with permission to change the Self-service settings, such as a user with the **System Administrator** role.
- For **Role request** and for access policy requests decided by global approvers: at least one user configured as an approver. More information in [Approvers](/v4-2/docs/approvers).
- For PAM Core access policy requests in the static access policy model, and for **Access policy administration request**: access policies with at least one administrator.

## Enable Self-service

1. In Segura™, on the navigation bar, hover over the **Product Menu** and select **Settings**.
2. In the side menu, select **Access control > Access Self-service > Settings**.
3. Turn on **Active self-request**.
4. In **Expiration time**, set how long a request can wait for a decision. Enter a whole number from 1 to 100 and select a unit: **Minutes**, **Hours**, **Days**, or **Months**.

## Choose the request types

In **Request types**, turn on each type users can request. Each enabled type appears as a card on the Self-service panel.

- **Enable roles requests**: users request roles.
- **Enable credential request**: users request a new domain credential.
- **Enable AD Account Provisioning request**: users request a new Active Directory account. To configure it, see [Configure AD account provisioning in Self-service](/v4-2/docs/self-service-how-to-configure-ad-account-provisioning).

## Choose the access policies users can request

1. In **Access policy request types**, turn on **Enable access policies requests**.
2. Turn on the toggle of each product whose access policies users can request: **Enable PAM Core access policies requests**, **Enable Cloud IAM access policies requests**, **Enable DevOps Secret Manager access policies requests**, **Enable Task Manager access policies requests**, or **Enable Certificate Manager access policies requests**.
3. In **Access policies**, in the table of each product you turned on, select the access policies users can request.
4. Optional: in the static access policy model, turn on **Enable access policy administration requests** and **Enable handover access policy administration requests**.

A product card appears on the panel only when at least one of its access policies is selected.

## Define the roles users can request

Skip this section if **Enable roles requests** is off.

1. In **List of roles available for request**, click **Add**.
2. In the **Roles** modal, select the roles users can request.
3. Confirm the selection.

## Define the global approvers

Global approvers decide every **Role request** and the access policy requests that do not go to the policy administrators. They also receive an email for each **AD Account Provisioning** request.

1. In **List of global approvers**, click **Add**.
2. In the **Global approvers** modal, select the approvers.
3. Confirm the selection.

## Save the settings

Click **Save**.

## Give approvers the Self-service Approver role

Global approvers approve role requests only when they hold the **Self-service Approver** role. Assign this role to each global approver who decides role requests. Access policy administrators and the users chosen in a handover do not need it. More information in [How to manage users](/v4-2/docs/how-to-manage-users).

## Verify your results

Sign in as a regular user and open **Desktop > Access Self-service > Panel**. The panel shows one card for each request type you enabled.

## Related topics

- [Self-service requests](/v4-2/docs/self-service-about)
- [Self-service settings](/v4-2/docs/settings-self-service)
- [Configure AD account provisioning in Self-service](/v4-2/docs/self-service-how-to-configure-ad-account-provisioning)
- [Request access through Self-service](/v4-2/docs/self-service-how-to-request-access)