Manage resources in a collection

Early Access release. See Enable self-service features.

Note:

You can only add Okta groups, push groups, and apps that don't support Entitlement Management to a resource collection if the Extend resource collections with Okta groups, Okta push groups, and non-Entitlement Management apps feature is enabled on your org. See Enable self-service features.

You can manage which resources are included in a resource collection. This includes adding apps and Okta groups (including push groups) to the collection, removing them, and setting the available entitlements.

Warning: If you add an app that has Entitlement Management enabled app to a collection, and then later disable Entitlement Management, Okta removes the app from the collection. Conversely, if you enable Entitlement Management for an app that's in a collection, the app remains in the collection.

Before you begin

Sign in as a super admin or an admin with the following permissions:
- Manage applications
- Manage collections
- Edit application's user assignments
- Edit groups' application assignments or Edit users' application assignments.
  See Custom admin roles and Role permissions.
Ensure that you're assigned to the Okta Access Requests app.

Add a resource

When you add a resource to a collection, you select the resource type from a dropdown list. Selecting Groups lets you add Okta groups and push groups. You can also add push groups when you initially add their parent app; if the app has push groups configured, you're prompted to select them as part of the same flow.

In the Admin Console, go to Identity Governance > Resource Collections.
Search for the collection and click View.
Click the Resources tab and then click Add resources.
Select the type of resource to add from the dropdown list: Apps or Groups.
Search for the resource to add and select it.
If you're adding an app and it has entitlements or push groups configured for it, select which entitlements and push groups to include in the collection, and then click Done or Save.
Optional. Search for and select additional resources of the same type to add to the collection.
Click Save on the Add apps/Add groups page. The selected resources are added to the collection.

Remove a resource

Note:

When you remove an app from a resource collection, any associated push groups are also removed from the collection.

In the Admin Console, go to Identity Governance > Resource Collections.
Search for the collection and click View.
Click the Resources tab.
Search for the resource to remove. If it's an app, select Remove app from the action menu. If it's an Okta group or a push group, select Remove.
Confirm the removal by clicking Remove app or Remove in the confirmation dialog. A message appears that confirms that the resource was removed from the collection.

Edit selected entitlements for an app

You can edit which entitlements to include in a collection for apps that have Entitlement Management enabled by completing the following steps.

In the Admin Console, go to Identity Governance > Resource Collections.
Search for the collection and click View.
Click the Resources tab.
Search for the app whose entitlements you want to edit. Click Edit entitlements from the action menu for the app.
Select the entitlements to include in the collection, and remove any unnecessary entitlements. Click Done.