---
title: Password Retrieval Approval Notifications
slug: singleconnect-reference-guide-3-1-0/password-retrieval-approval-notifications
description: Learn how to set up an approval requirement mechanism for password retrieval, specifically for user groups with a defined device group realm that includes the SAPM account. Discover the step-by-step instructions for implementing this approval process, inc
docTags: 
createdAt: 2022-07-29T13:44:51.000Z
---

An approval requirement mechanism for password retrieval can be established for user groups that have a device group realm defined with the device that contains the SAPM account.
To set up an approval requirement for a user group:

1. Navigate to **Policy Control** > **Portal Function**s.
2. Open the **Realm Definition** tab.
3. Select the **SAPM Approval Requirement Function Group** and the** User Group** (The SAPM Management function group still needs to be included in the realm, to allow the users to see the SAPM Management portal)
4. Clic**k Save**.



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/UKyCGy9JdN4xQSEx69FKm_image.png "Portal Functions Realm for a SAPM Approval Requirement Group")

When a user requests the SAPM password and needs administrative approval, a **SAPM Password Approval Request** email is sent to the following users:

- User groups with the portal functions **single.connect.sapm.admin** or **single.connect.sapm.network.admin **(or the SAPM Admin or SAPM Network Admin function groups)

| single.connect**.sapm.admin**    | Grants rights to manage all SAPM accounts and view all logs.                      |
| ------------------------------------- | --------------------------------------------------------------------------------- |
| single.connect.**sapm.network.admin** | Grants rights to manage and view all accounts of the devices defined to the user. |

- User groups with the FULL\_CONTROL permission over the SAPM Account that requested the approval