...
In order for the user approval workflow to work, self-sign-up must be enabled. This will enable new users to sign up for the system. This can be done selecting Administration → Portals → <portalname> → Configuration → Security
...
The screenshot above also has another relevant field called “Template user for self-sign-up users”Another relevant field is the Self Signup Template. The administrator can create a user template and then select it herein Administration → System → Services → User Management. All the users approved through the workflow will receive a set of roles that come with that template user by default. It is possible later on to manually add and remove roles from the new user.
...
If no further action is taken, the sign-up process will be generic and automatic. This is why another step is required: enabling the user approval workflow in the Media Manager. This can be done selecting Administration → Portals → <portalname> → Configuration → Security, and then selecting the correct workflow from the dropdown list.
...