She explained the process, didn't say she did it (but it was within her job description if she needed to do it). Also, it was the responsibility of the intelligence community to determine if the reason was valid - they didn't have to release names just because a person with clearance wanted it/them.
“When the intelligence community would respond to a request from a senior national security official for the identity of an American, that would come back only to the person who requested it,” she first said in response to a question from Mitchell. “It would brought back to them directly… To me or whoever might have requested it.”