Nine IT self-service portals and employee request tools for 2026

TL;DR

• Our pick for teams with the required configuration is Computer, by DevRev. It can move supported access and password requests forward in Slack or Computer through connected tools and workflows, with human approval where required.
• An IT self-service portal is where a request gets typed. Another system, like the identity provider or the HR system, grants the access. So we graded nine tools on what happens after the employee hits “submit.”
• Six of the nine publish that the tool itself makes the change. Two of those do it only on upper plans: InvGate on Pro and up, and ServiceNow on ITSM Prime with an AI Prime entitlement. Two tools make part of the change, and one routes the request to a person.
• Five vendors publish that requesters are free, unlimited, or not billed. Okta, the one tool here that holds the access, prices every employee as a seat.

An employee asks for access to the finance team’s shared drive on a Tuesday morning, and the portal replies within seconds with a ticket number. On Thursday they’re still asking a coworker to forward files, because the ticket is waiting for someone in IT to add them to a group by hand. The request took a minute to file and still isn’t done.

Every tool below has a portal or a chat surface, but employees don’t always use it. In a January 2026 r/ITManagers thread, one IT manager wrote, “We have a portal that no one uses.” People, the manager added, “will always use the easiest path.”

The back half of a request is where the tools differ, and it’s the half your employees feel. As our colleague Neelabja Adkuloo, Member of Marketing Staff, wrote in our post on AI for IT support, “A help article can explain how to request access. It can’t tell an employee why access failed five minutes ago.”

IT self-service portals compared on what happens after submit

The “After submit” column below applies one test. A tool makes the change when its own pages show it granting access (a group, license, or app) and also resetting passwords or creating accounts, with no separate product or custom code. It makes part of the change when some of those actions need a sister product or a custom request. Otherwise, including where only a paid partner add-on writes the change, it routes the request to a person.

This is desk research: we worked from the vendors’ own pricing pages, admin guides, and connector lists, first read on September 25, 2026. We re-checked every price on October 5 and October 16, 2026, and our Computer price on October 21, 2026. Each quote from Reddit or from G2, a software review site, is one practitioner’s account, linked and dated; where a tool drew no Reddit or G2 conversation, its entry goes without a quote.

The nine employee self-service portals and IT request tools, entry by entry

1. Computer, by DevRev – the request and the change in one conversation

Computer is our AI teammate and our pick for teams that can configure the required IT self-service workflows. Our IT self-service page describes the intended path; confirm the actions available in your deployed configuration. An employee who needs a software license asks in Slack, in Computer, or wherever they already work. Then “Computer checks their identity and the company’s policy, provisions the license, updates the system of record, and records the change.”

Our “How Computer works” page describes Computer AirSync, the data-sync layer, as “our patented two-way sync engine” that “makes changes in real time.” Write actions depend on the supported tools and workflows configured for the agent in Agent Studio; verify which identity and access systems can actually be changed in your deployment.

Our IT self-service page names one place those actions land: “creating tickets in ServiceNow.” Our Okta connector syncs identity data one way, into Computer, so plan a workflow for every system you want changed.

Human approval can be configured for sensitive actions before a workflow runs. Check the approval path and recovery method for each connected system; a password reset or external access change is not universally reversible with one click. Read more about safe actions.

Best for – IT teams evaluating a configured self-service workflow for access and password requests, with human approval wherever their policy requires it.

After submit – can make a permitted change through a configured write workflow; otherwise it should seek approval or hand the request to the responsible person.

Pricing – As checked October 21, 2026, self-serve Pro was listed at $30 a month on computer.io, while the DevRev pricing page directed Pro and Max buyers to contact the team. That self-serve figure is not a quote for an IT self-service deployment. Confirm platform seats, usage credits, integrations, and configured workflows in a current DevRev proposal.

Limitations

• Confirm which internal-agent features, connected-system write actions, and approval paths are available before planning an employee rollout.
• Computer works on requests asked in conversation, not a click-through catalog. A team that audits by form keeps its IT service management (ITSM) catalog beside it.
• We publish no configuration management database (CMDB), asset management, or change management, so Computer sits beside an ITSM tool like ServiceNow instead of replacing it.

In Agent Studio, confirm which tools and workflows are configured for the agent before deploying an IT self-service use case.

To test a software-license request against your own connected systems, including where approval and provisioning would occur, book a demo of Computer.

2. Freshservice – the workflow that finishes the job on every plan

Freshservice is the IT service desk from Freshworks. Its Orchestration Center connects identity apps for Azure AD, Okta, and Google Workspace to its Workflow Automator, with a separate app for on-premises Active Directory (AD). Freshworks’ own documented example ends, “Freshservice then adds Jacob to the Group and resolved the ticket.”

Employees can also raise catalog requests from Slack or Microsoft Teams. There, in Freshworks’ words, Freddy AI Agent “searches available items and raises requests directly.”

Best for – mid-market IT teams closing account creation and group changes inside the ticket, without scripts.

After submit – makes the change. The workflow runs Azure AD user creation, group membership, and password resets as orchestration actions.

Pricing – $19, $49, and $99 per agent a month, billed annually, with Enterprise quoted. Freshservice’s agent guide says you’re charged “only for the total number of full-time agent seats you have.”

Limitations

• Each orchestration action counts toward a monthly transaction cap of 1,000-20,000, depending on the plan. Extra packs cost $250 per 1,000.
• The service catalog starts on Growth, not Starter.
• The chat agent, Freddy AI Agent (Classic), comes only with Enterprise, at 1,200 sessions a year per license.

On G2, an IT systems administrator at a mid-market company describes what the workflow handles once a request comes in, including requester data pulled from the company’s identity provider (IdP). The same reviewer’s complaint is that some marketplace apps “aren’t maintained so they don’t always work.”

“It automates ticket assignment, account provisioning, approval workflows, and resolution note generation. The AI agent uses knowledge from our knowledge base effectively. It also pulls in user data from our IdP to keep requester information up-to-date.”

Uriel A., IT Systems Administrator at a mid-market company. G2, April 2026 ↗

3. SysAid – employee-facing AI inside the price you already pay

SysAid, an IT service management vendor, includes an “AI-powered Copilot for agents & end users” in its Professional plan price. The access changes come from SysAid’s marketplace. There, free AI agents create Azure AD users and run a self-service Azure AD password reset, and an Azure AD user management bot adds and removes licenses from request workflows.

Best for – mid-size IT teams buying the employee chatbot and prebuilt AI agents for one published price.

After submit – makes the change in Azure AD.

Pricing – SysAid’s Service Management plan table lists Professional at $89 per agent a month. Enterprise is custom and starts at 20 agents. As of October 16, 2026, the page doesn’t state a billing period or a requester price, so ask SysAid for both in writing.

Limitations

• The identity actions we found work with Azure AD only. Other directories go through Workato, an integration platform, metered at 100,000 credits on Professional.
• SysAid’s service catalog documentation tells teams without the catalog to ask their customer success manager.
• Tailor-made AI agents come only with Enterprise.

On Reddit, an admin who used SysAid at a previous job warns about the add-ons:

“Everything is an additional add on for another fee. Everything you need to implement requires buying dev time.”

u/alwayswrongvpn. r/sysadmin, August 2025 ↗

4. InvGate Service Management – a fixed price, and approvers who cost nothing

InvGate, an IT service management software company, states its requester terms plainly: requesters and approvers “are unlimited and free of charge.” On Pro, InvGate’s built-in action connectors create, enable, and disable users and manage groups in Entra ID, and they reset passwords in Google Workspace. Provisioning “runs after the assigned manager approves.” InvGate’s self-service page describes a portal that stops at intake in four words: “It’s just a form.”

Best for – small IT teams budgeting from a published annual price.

After submit – makes the change on Pro and Enterprise. The workflow builder that holds the connectors is “Not included” on Starter.

Pricing – InvGate’s plan cards list Starter at $1,499 a year for five agents, Pro at $500 per agent a year from $2,500, and Enterprise from $12,000 a year.

Limitations

• Microsoft Teams intake and the Virtual Service Agent start on Pro.
• The connector list we read shows Okta actions as reads (users, groups, and memberships), so Okta shops should ask InvGate about writes.

5. ServiceNow EmployeeWorks – one front door on the estate you already run

ServiceNow, the enterprise workflow software company, announced EmployeeWorks in February 2026.

ServiceNow’s launch release says it combines the conversational AI of Moveworks, which ServiceNow acquired, with ServiceNow’s portal and workflows. ServiceNow’s May 2026 release for ServiceNow Otto, its new AI experience, says Otto is “already at work across the platform, beginning with ServiceNow EmployeeWorks.” The EmployeeWorks page says it can hand requests “off to AI agents that execute work from start to finish,” following “business rules, approval paths, and role-based permissions.”

Best for – enterprises already on ServiceNow that want a single place for IT, HR, and finance requests.

After submit – makes the change on ITSM Prime with an AI Prime entitlement. ITSM Prime is the only package that lists the L1 Service Desk AI Specialist, which ServiceNow’s launch release says handles password resets and software access provisioning.

Pricing – not published. The ITSM packages page lists Foundation, Advanced, and Prime with “Get Custom Quote.”

Limitations

• ServiceNow’s community article introducing its Autonomous Workforce AI Specialists says the L1 Service Desk AI Specialist “is now generally available.” It needs an AI Prime entitlement, works in English only for now, and uses 15 assists per incident it tries.
• Employee Slate, the portal layer employees see, is “not sold standalone,” says ServiceNow’s “Getting started with ServiceNow EmployeeWorks” article. It also needs the Zurich Patch 9 platform release.

One admin describes the finished ServiceNow (SNOW) version at a large company, where access to a file share runs without IT touching it:

“Manager approves, then with the service account and delegation in AD, the group is added to the user via the SNOW workflow.”

u/Miwwies. r/sysadmin, March 2026 ↗

6. Jira Service Management – free requesters, and group changes in Entra ID

Atlassian, the software company behind Jira, puts the requester terms in one line on its pricing page: “Customers are free and don’t require a Service Collection license.” Atlassian now sells Jira Service Management (JSM) in its Service Collection, with Assets and Rovo. Its automation documentation lists actions that add users to Entra ID groups and remove them, and others that enable and delete users. That list has no built-in action to create an account, so account creation goes through its “Send custom Entra ID request” action, which a Jira admin sets up.

Best for – companies already on Jira, where IT requests often become engineering work.

After submit – makes part of it. Entra ID group changes come built in, and account creation needs a custom request.

Pricing – free for three agents. Atlassian’s licensing page prices agents 1-15 at $26.90 a month on Standard and $61.60 on Premium, then $20.15 and $53.70 for agents 16-100. The pricing page’s $21.50 and $55.28 average those rates at 75 agents.

Limitations

• The virtual service agent comes only with Premium and Enterprise, with 1,000 assisted conversations a month and $0.30 for each one after that.
• Each plan caps automation, at 3,000 steps per user per month on Standard.
• Single sign-on (SSO) and System for Cross-domain Identity Management (SCIM) provisioning need a separate Atlassian Guard subscription below Enterprise.

A test engineer at a mid-market software company uses Jira Service Management from the requester’s side. The catch, in their words, is that some request forms “ask for a lot of information, even for simple issues.”

“I can always see whether a ticket is waiting for approval, assigned to someone, in progress, or completed. When I need software access, hardware, or general help from the IT team, everything goes through one place, which helps ensure nothing gets missed or lost.”

Sree K., Software Development Engineer in Test III at a mid-market software company. G2, August 2026 ↗

7. ManageEngine ServiceDesk Plus – ITIL depth in the cloud or on-premises, from $13 on Cloud

ManageEngine, the IT management division of business software company Zoho, puts incident, asset, CMDB, and change management in one product. It follows ITIL (formerly the IT Infrastructure Library). A free Standard edition covers up to five technicians, and the page promises “no restriction on the number of IT end users.”

After “submit,” ManageEngine’s admin guide uses a separate product, ADManager Plus, to create Active Directory accounts. Technicians run “Create User in AD” from the request. On Cloud, a no-code Zoho Flow action can add users to an Entra ID group, according to the release notes.

Best for – cost-conscious IT teams that run ITIL processes and may need to stay on-premises.

After submit – makes part of it. Technicians run account actions through ADManager Plus.

Pricing – the price list starts Standard, Professional, and Enterprise at $13, $27, and $67 per technician a month on Cloud, on a yearly subscription. On-premises, they start at $120, $248, and $598 per technician a year. Standard is free up to five technicians on one instance.

Limitations

• The service catalog is a paid add-on at $1,595 a year for Standard and Professional on Cloud, or $1,195 on-premises. Only Enterprise includes it.
• Self-service password reset is a sister product, ADSelfService Plus. ManageEngine’s deployment comparison shows that integration on-premises only.
• Slack intake is Cloud-only.

One admin likes the software self-service, which uses ManageEngine’s endpoint tools: every program they package “gets added to selfservice as well,” they wrote on r/sysadmin. Another r/sysadmin admin, who runs offboarding through ServiceDesk Plus, hit a checklist limit:

“The 25 item limit is annoying. Our exit checklist has to be in three parts.”

u/Recent_Carpenter8644. r/sysadmin, November 2025 ↗

8. TOPdesk – one catalog for IT, facilities, and HR

TOPdesk, a service management vendor from the Netherlands, says its portal “feels like a webshop with big, clear buttons,” for laptops, vacation requests, and broken printers alike. Property and fleet management are in every plan, which suits shared service desks.

Once a request is in, TOPdesk routes it. Its pages describe requests reaching the right team “automatically assigned and categorized.” Writing the change into Entra ID takes a paid partner solution, offered in the European Economic Area (EEA), the UK, and Switzerland, that requires consultancy.

Best for – shared IT and facilities desks, many of them in Europe, that serve every department from one portal.

After submit – routes it to a person. Identity changes need a paid partner add-on.

Pricing – at 30 agents in US dollars, TOPdesk’s pricing page lists Essential at $64, Engaged at $91, and Excellent at $128 per agent a month. A smaller team pays more per seat: Essential costs $76 per agent at 10 agents. There’s no limit on requesters.

Limitations

• Multi-level approvals and change and workflow management aren’t in Essential.
• The price calculator stops at 50 agents. Beyond that, it’s a sales call.
• Self-service password reset is a paid partner product (FastPass), not a native feature.

9. Okta – no service desk, and every key on the ring

Okta, the identity provider, is the one tool here that holds the access itself. With Okta Access Requests, an employee picks a request type in the Okta Access Requests web app, Slack, or Microsoft Teams. Approvers act, and then the requester “is assigned to the resource after the required steps are completed.” The changes nobody requests happen without a form.

Okta’s Lifecycle Management page says it “automatically creates accounts for new hires, updates permissions when roles change, and revokes access the moment an employee leaves.” The HR system drives it all.

Best for – companies that want joiners, movers, and leavers handled from the HR record, and requests for everything else.

After submit – makes the change, because Okta holds the assignment.

Pricing – Okta’s pricing page lists Starter at $6, Core Essentials at $14, and Essentials at $17 per user a month, billed annually, with a $1,500 annual contract minimum. Essentials is the lowest-priced suite with Access Governance, and Professional and Enterprise are by quote.

Limitations

• Okta doesn’t sell Access Governance on its own.
• Workflows stop at five flows on Starter and Core Essentials, and 50 on Essentials.

An admin whose company runs Okta still gets lockout and reset tickets, despite self-service password reset (SSPR):

“SSPR already exists, but users are not using it efficiently or are not aware of how to use it.”

u/mynameisnotalex1900. r/sysadmin, May 2026 ↗

How do you count the access changes nobody requested?

Run one query on your own data: take everyone who left last quarter, and count the systems where their access ended on their last day without anyone filing a ticket. That number measures the half of self-service no portal can show you.

Then look at the requests people do type, and count how many still wait on a person to make the change. In a post on what sits behind employee requests, Amar Gautam, Head of DevRev Labs, explains why that second count matters:

“There is no article that grants access. An access request can’t be deflected. It has to be performed, with authority, in a system of record.” – Amar Gautam, Head of DevRev Labs

Bring the second number to a demo of Computer, and we’ll walk through which of those waiting requests it could finish in the chat where the employee asked.