Team roles
End of sale announcement
Effective May 1, 2026, Okta will no longer sell or renew Advanced Server Access. Existing customers must migrate to Okta Privileged Access within one year of their next scheduled renewal date to maintain service.
Read the FAQ and learn more about Okta Privileged Access.
Team roles assign explicit permissions to every member of a group. You can add or remove roles when creating or updating a group. The following roles are available:
| Role | Description |
|---|---|
| Admin | Allows group members to manage users, groups, entitlements, and project resources.
Note: Only members of a group that already has the Admin role can assign this role to other Advanced Server Access groups. |
| Reporting | Grants group members read-only access for reporting purposes. |
You can't modify team roles for the Owners group.