Assign delegate from the Admin Console

You and users can assign another user as a delegate to complete governance tasks for them. Governance tasks include access certification campaign review items and access request approvals, questions, and tasks.

Before you begin

  • You must be a super admin.

Start this task

  1. In the Admin Console, go to DirectoryPeople.

  2. Search and select a user.

  3. On the user's profile page, go to the Delegate tab.

  4. Click Assign a delegate.

  5. Specify the delegate user.

  6. Optional. Select Delegate for specific duration and enter a start and end date.

  7. Optional. Add a note to the delegate.

  8. Click Save.

After you assign a delegate, all future access certification campaign review items and tasks, questions, and approvals within access requests are rerouted to the delegate. If you specified a duration, then the governance tasks are rerouted to the delegate only for that time period.

When you assign or change a delegate, existing access certification campaign reviews and tasks for access requests assigned to the user (or the previous delegate) aren't delegated. The user must reassign these tasks themselves. See Reassign review items or Manage tasks.

Users can see the delegate assignment information from the Access Certification Reviews or Okta Access Requests app. To allow them to add, change, or remove their delegate themselves, turn on the Enable end users to assign their own delegate toggle from the Settings page. If you've enabled the Delegate restrictions feature, you can allow users (non-admins) to select anyone in the org as a delegate or restrict the selection to the user's manager or the user's manager and colleagues. However, as a super admin, you can assign any user as a delegate, regardless of the restrictions you apply to users. See Enable end users to assign delegates.

For example, even if you've restricted the delegate selection to the user's manager, you can assign the user's colleague as their delegate. However, because this delegate isn't on the allowed list of delegates, the user can view and remove the delegate but they can't edit the assignment.

To understand the user experience of viewing or making changes to their delegates, see Manage delegates.