The new leave type must be added exclusively to the manager Leave Type security segment . The segment defines the leave types available to the security roles connected to its segment-based security group. If managers have access to that segment and employees acting as Employee as Self do not, managers can enter the leave on behalf of eligible workers while workers cannot request it themselves.
A business process security policy controls which security groups can initiate actions such as Request Leave for Self or Request Leave for Worker. It does not provide a list in which individual leave types are assigned.
On Leave Status Visibility controls whether users can see a worker's leave-status indicator; it does not control who can request the leave. Absence type groups organize time offs, absence tables, and leave types in the absence-selection interface, but grouping is a presentation configuration rather than an access-control mechanism.
The administrator should also verify that the manager's segment-based security group has access to the manager segment and is authorized to initiate Request Leave for Worker. The new leave type should not be included in any segment available to Employee as Self.
Study Guide reference: Leave of Absence - Configuring Leave Type Segment Security .