---
title: Password Retrieval Approval Notifications
slug: kronpam-reference-guide-3-5-0/password-retrieval-approval-notifications
description: Learn how to set up an approval requirement mechanism for password retrieval in this detailed document. Follow the steps to navigate to the Policy Control > Portal Functions section and select the SAPM Approval Requirement Function Group and User Group. T
docTags: 
createdAt: 2022-07-29T13:44:51.000Z
---

An approval requirement mechanism for password retrieval can be established for user groups that have a device group realm defined with the device that contains the account.
To set up an approval requirement for a user group:

1. Navigate to **Policy > Portal Functions.**
2. Open the **Realm Definition** tab.
3. Click on to **Add** button.
4. Select the **SAPM Approval Requirement Function Group** and the** User Group **(The SAPM Management function group still needs to be included in the realm, to allow the users to see the SAPM Management portal)
5. Click **Save.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/X54D9B08a-cgaHFwtYuYq_image.png" size="66" width="980" height="650" position="center" caption="Portal Functions Realm for a SAPM Approval Requirement Group" showCaption="true"}

When a user requests the Account password and needs administrative approval, a** SAPM Password Approval Request** email is sent to the following users:

- User groups with the portal function **single.connect.sapm.admin** or **single.connect.sapm.network.admin **(or the SAPM Admin or SAPM Network Admin function groups)

| single.connect**.sapm.admin**    | Grants rights to manage all SAPM accounts and view all logs.                      |
| ------------------------------------- | --------------------------------------------------------------------------------- |
| single.connect.**sapm.network.admin** | Grants rights to manage and view all accounts of the devices defined to the user. |

- User groups with the FULL\_CONTROL permission over the SAPM Account that requested the approval.