See Allow self registration for new directory users for instructions to enable self registration.
You need to be either a Global Administrator, Identity Repository Administrator, or have at least User Manager entitlements to approve a new directory user.
If you've configured self-registration to require approval, after a new directory user registers, you will need to approve their access to PingOne.