---
title: Password Retrieval Approval Notifications
slug: singleconnect-reference-guide-3-3-0/password-retrieval-approval-notifications
description: Learn how to implement an approval requirement for password retrieval within specific user groups and device group realms. Follow simple steps, including navigating to the Policy Control portal, selecting the SAPM Approval Requirement Function Group and U
docTags: 
createdAt: 2022-07-29T13:44:51.000Z
---

An approval requirement mechanism for password retrieval can be established for user groups that have a device group realm defined with the device that contains the SAPM account.
To set up an approval requirement for a user group:

1. Navigate to **Policy Control** > **Portal Function**s.
2. Open the **Realm Definition** tab.
3. Select the **SAPM Approval Requirement Function Group** and the** User Group** (The SAPM Management function group still needs to be included in the realm, to allow the users to see the SAPM Management portal)
4. Clic**k Save**.



![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/UKyCGy9JdN4xQSEx69FKm_image.png "Portal Functions Realm for a SAPM Approval Requirement Group")

When a user requests the SAPM password and needs administrative approval, a **SAPM Password Approval Request** email is sent to the following users:

- User groups with the portal functions **single.connect.sapm.admin** or **single.connect.sapm.network.admin **(or the SAPM Admin or SAPM Network Admin function groups)

| single.connect**.sapm.admin**    | Grants rights to manage all SAPM accounts and view all logs.                      |
| ------------------------------------- | --------------------------------------------------------------------------------- |
| single.connect.**sapm.network.admin** | Grants rights to manage and view all accounts of the devices defined to the user. |

- User groups with the FULL\_CONTROL permission over the SAPM Account that requested the approval