Access requests are decided by a Super User or by someone named as a New User Approver. This is not a permission, so a campus override cannot grant it or take it away. See User Access Types for what a Super User is, and Campuses and organizations in Version 8 for how campus access works.
When someone tries to sign in or register, One Church Software looks for a profile in your system with a matching email address. If it can't find exactly one, it can't link the login to a profile on its own. Instead, it adds an access request to the Pending tab so someone at your church can choose the right profile.
This isn't an error. It's a safety check that keeps people from getting access to the wrong profile and helps you avoid duplicate profiles.
Why requests appear
There are two reasons a request lands on the Pending tab.
No profile matches their email
This is the most common reason. It usually happens when someone signs in with Google, Apple, or Microsoft using an email address you don't have on file for them, such as a personal Gmail address when their profile has a work email.
When you open one of these requests, you'll see the message "No profile matches this request's email. Search for the person below to link the request to their profile." The request's Possibilities column shows 0.
More than one profile matches their email
This happens when several people share an email address, such as a family that uses one household email. The system doesn't know which person is signing in, so it asks you to choose. The Possibilities column shows how many profiles matched.
How to approve a request
Go to Settings & Tools (Cog icon in the tool-bar) > Your Organization > Security, then click the Pending tab.
On the Access Requests sub-tab, click the three-dots menu at the start of the request's row and select Decide.
In the User Access Request Decision window, choose the person's profile:
If matching profiles are listed, check the box next to the right one.
If no profiles are listed, or the right person isn't among them, type their name in Search All Profiles and select their profile.
Click Grant Access.
The person's login is now linked to that profile, and they'll receive an email to finish setting up their account.
Tip: If you don't recognize someone, or you can't find a profile for them, leave the request alone and reach out to the person first. If they're new to your church, add their profile, then come back and grant access. You can also remove a request you don't want by selecting Delete from its 3-dots menu.
Who gets notified about requests
Approvers are emailed when a new request comes in and see it as a pending item on their dashboard. You can manage the approver list at Settings & Tools > Your Organization > Security > Options, under New User Approvers.
Changing the approver list needs the Limited Account permission. It is account-wide, so it applies at every campus and a campus override cannot take it away. If your account has more than one organization, the person changing the list also needs to reach every organization. See Account Settings for what the permission covers, and Campuses and organizations in Version 8 for how campus and organization access works.