In Self Services > Requests pane, a person for whom an identity has been created with role Self-Service User can request access privileges. The request needs to be approved by a set of approvers with the Approver role.

By default, no identities are configured with the Approver role. How to assign the Approver role to identities can be found in chapter Assigning and Unassigning Roles.