Manage delegates

Understand what non-admin users need to do to set up delegates.

Users who have access to the Access Certifications or Okta Access Requests app can specify another user as a delegate or change their assigned delegate only if you've toggled on Enable end users to assign their own delegate. If you haven't enabled this setting, users can only view their delegate assignment information. If you've enabled the Delegate restrictions feature for your org and configured restrictions, then users may be restricted to selecting only their manager or their manager and colleagues (users who report to the same manager) as their delegate. See Enable end users to assign delegates.

If an admin assigned a delegate to a user that is outside the user's allowed list of delegates, users can't edit that assignment. They can only remove it and create a new assignment from their eligible list.

1. Reviewers and approvers go to their dashboard (End-User Dashboard).

2. Open the Access Certification Reviews or Okta Access Requests app. The changes made from either app are applicable to governance tasks for both Access Certifications and Access Requests.

3. Click the profile icon to open the dropdown menu.

4. Click Delegate. Users can view, update, and delete the previously assigned delegate.

5. On the Delegate page, specify the delegate user.

6. Optional. Select Delegate for specific duration and enter a start and end date.

7. Optional. Add a note to the delegate.

8. Click Save.

   After the user assigns a delegate, all future access certification campaign review items and tasks, questions, and approvals within access requests are rerouted to the delegate. If the user specified a duration, then the governance tasks are rerouted to the delegate only for that time period.

   Governance tasks are assigned only to the original reviewer or approver's delegate. For example, the original reviewer assigns their manager as a delegate and the manager assigns the director as a delegate. In this example, the governance tasks assigned to the original reviewer are still delegated to the manager.

   When users assign or change a delegate, existing reviews and tasks for access requests assigned to the user (or the previous delegate) aren't delegated. The user must reassign these tasks themselves. See Reassign review items or Manage tasks.