# Configure Access Rules for Ticketing Systems (MCAS)
User access rules play a pivotal role in defining valid users and login protection methods for accessing critical systems. Unlike the Automatic Critical Access System (ACAS), the Manual Critical Access System (MCAS) requires manual configuration of login protection methods and user access validity details.
#### Before You Begin
* Log in to Sprinto as an administrator.
#### Defining User Access Rules
1. Navigate to Data Library > Access > Critical Systems and select the desired critical system from the list. Use the search bar for quick navigation.
2. On the Critical System’s Summary page, click Configure/Manage. Optionally, you can also click View & Fix next to the Rules for who can access critical systems should be configured.\
Note: Update user access rules for all accounts in case of multiple accounts for a critical system.
3. Defining Access Validity:\
Take the following steps to define the valid users that can access the critical system:
* On the Manage page, click Configure/Manage next to access validity.
* Choose one of the following options to define valid users:
* All Staff Members Are Allowed Access: For systems accessed by all staff members, such as HRMS services, email providers, VPN services, etc.
* Role-Based Access: For systems accessed by specific roles in the organization. Select the job roles and click Save.\
Note: You can select multiple roles under Valid roles if required.
* Ticket-Based Access: For systems accessed based on access requests logged through a ticketing system. Configure the ticketing system after selecting this option.\
Note: " Connected " is highlighted next to already integrated services. Optionally, you can click Connect to integrate a service provider.\
4. Defining Login Methods:
* On the Manage page, click Configure/Manage next to login methods.
* Select the login protection methods for accessing the critical system and click Save.
* Multi-Factor Authentication (MFA)
* Complex Password
* Single Sign-On (SSO)
* Virtual Private Network (VPN)
* After configuring login protection methods, the Sprinto check Evidence should be uploaded for selected login methods within the critical system {critical system name} gets activated. Refer [how to resolve guide](/monitors/authentication-and-access-monitors/how-to-resolve-sprinto-check-for-collecting-evidence-against-configured-login-protection-mechanism.md) for further details.\
#### Conclusion
Once both user access rules is configured against a critical system, the activated Sprinto check status gets updated to “Passing.” Depending on your user access process changes, you can modify these rules anytime if required.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.sprinto.com/data-library/access/dashboard-actions/configure-access-rules-for-ticketing-systems-mcas.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
