> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/access-policies-and-approvals/access-control-overview/public-application-access-control.md).

# Public application access control

Public applications are shared SaaS applications that users reach through the Self Service Portal. Access to them is granted on the **Public Applications** tab.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/q7GG090gTc3PxWMQerOh/assets/06.png)

{% stepper %}
{% step %}

## Add access control

Select **Add Access control**.

The dialog lists the public applications on top and the users below. Tick the applications, tick the users who should get them, and select **Save**.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/Wj4rrKftbxDYSDrQUpKF/assets/07.png)
{% endstep %}

{% step %}

## Review the grants

Every combination you tick is created as its own grant, so selecting three applications and two users creates six rows.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/6F1GyULISLFgt2iKsqRV/assets/08.png)

The list shows the user, the public application, its URL, the credential type, and when the grant was created. **Credential Type** tells you how the password is held:

* **SHARED** means one set of credentials is used by everyone mapped to the application.
* **INDIVIDUAL** means each user holds their own.
  {% endstep %}
  {% endstepper %}