Configure help desk admins
Super admins can assign the help desk admin role to a user and scope that role to a group. See About help desk administrators.
In the Admin Console, go to Security > Administrators.
Click Add Administrator. In the resulting dialog box, do the following:
- Type an administrator name into the Grant Administrator Role to field.
- Select the Help Desk Administrator role.
- Select Can administer user in specific groups (recommended).
- Type in the group name of the Okta groups the admin will control. You can also select Active Directory (AD) or LDAP groups in addition to Okta groups. This allows you to assign specific AD or LDAP groups for the Help Desk admin to handle.
Configure help desk admin for AD users
If you want your help desk administrator to perform operations on users that delegate authentication to AD, you’ll also have to configure the AD policy:
In the Admin Console, go to Security > Authentication.
Select Active Directory Policy.
- Edit the Legacy Rule to indicate that the user can change passwords.
- Click Update Rule.
In the Admin Console, go to Applications >