> For the complete documentation index, see [llms.txt](https://docs.snyk.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/start-scanning/overview-scan-settings/configure-risk-acceptance-workflow.md).
# Configure risk acceptance workflow
Customize the risk acceptance workflow in Snyk API & Web to align with your organization's internal security and compliance processes.
By configuring this feature, you can require users to provide specific information, such as an expiration date or an approver's name, when they move a finding to the **Accepted Risk** state. This ensures that risk acceptance is consistently documented and periodically reviewed.
## Configure the workflow
As the Account Owner, you can define which fields are mandatory when a user accepts the risk of a finding.
1. From the side menu in your Snyk API & Web account, navigate to **Settings > Scan Settings**.
2. Locate the **RISK ACCEPTANCE WORKFLOW** module.
3. Select the check boxes for the fields you want to require:
* **Expiration date** - Requires the user to set a date on which the risk acceptance automatically expires. If you select this, you can also set a **maximum acceptance period** (in days) to limit how far in the future the expiration date can be.
* **Approver name** - Requires the user to enter the name of the person who approved the finding.
* **Approval date** - Requires the user to enter the date when the finding was approved.
4. Click **Save** to apply your changes.
## Accept a finding's risk
After you configure the workflow, Snyk prompts any user accepting a finding's risk to provide the required information.
1. Navigate to any page where findings are listed (for example, the global **Findings** page or a target's details page).
2. Select one or more findings you want to accept.
3. From the **State** dropdown menu, select **Accepted Risk**.
4. A dialog opens, listing the custom fields you configured.
5. Fill out the required information and click **Accept risk**.
## Verify the outcome
After you submit the form, the state of the selected findings changes to **Accepted Risk**. Snyk records this action, along with all the information you provided, in both the individual finding logs and the account audit log.
If you set an **expiration date** for a finding, Snyk automatically reverts its state from **Accepted Risk** back to **Not Fixed** after that date is reached, so the finding is re-evaluated in future scans.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/start-scanning/overview-scan-settings/configure-risk-acceptance-workflow.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.