Manage access request conditions

You can enable, disable, view, edit, and delete access request conditions, or change their priority order.

To remove an app tile from the End-User Dashboard app catalog, disable the conditions associated with the app before deactivating or deleting it.

Before you begin

  1. Sign in to the Admin Console as a super admin or as a user with both access requests admin and app admin roles. Keep these Considerations in mind before making any changes.

  2. In the Admin Console, go to ApplicationsApplications.

  3. Select an app and go to the Access requests tab on the app's profile page.

Enable a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Enable.

After you enable the condition, requesters can request access to the app and the access levels you specified in the condition. The request's approval is handled by the steps defined in the approval sequence that you selected in the condition.

Check that items you've referenced in a condition, such as groups and bundles, are active or available. If any of these items are deactivated or deleted, the condition becomes invalid when you enable it or when a requester submits a request.

Disable a condition

  1. Open the options dropdown menu associated with a condition that has an Enabled status.

  2. Click Disable.

When you disable a condition, existing requests that use the condition aren't impacted. You can only make changes to a condition after you disable it.

View a condition

  1. Open the options dropdown menu associated with a condition.

  2. Click View.

Edit a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Edit.

  3. Make the required changes. You can also select a different approval sequence, edit, or delete it at this step.

    Changing a sequence impacts all other conditions that use it. Deleting a sequence can cause other conditions that use it to become invalid.

  4. Click Update.

Delete a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.
  2. Click Delete.

Change priority order

The number that's associated with the condition defines its order of priority. Use the drag-and-drop handle for a condition to change its priority order.

Okta only considers the priority order for conditions that have an Enabled status. If a requester meets the criteria for more than one condition, the condition with the highest priority determines which approval sequence is used to approve the request and which access duration is applied.

To understand the experience for requesters, request assignees, and approvers, see Create requests, Manage requests, and Manage tasks.

Re-enable a condition for group changes

If you change a group name or description, you must disable the conditions that include that group, and then enable them again for the change to take effect.

  1. In the Admin Console, go to DirectoryGroups.

  2. Select the group that you want to edit.

  3. In the Actions menu, click Edit.

  4. Make changes to the name or description, and then click Save.

  5. Go to ApplicationsApplications.

  6. Select the app with conditions that include this group, and go to the Access requests tab on its profile page.

  7. Open the options dropdown menu associated with the condition, and then click Disable.

  8. Open the options dropdown menu again, and then click Enable.

Related topic

Configure an approval sequence