Super administrator is the highest level of Okta permissions. Super admins perform all admin activities for an org and have full management access.
Super admin permission is required to:
- Create other admins
- Edit or revoke other admins
- Install and configure agents (like the AD agent)
- Assign roles to Okta groups
- Grant access to Okta Support
- Enable self-service registration
- Add users to admin groups
- Download a CSV file for auditing purposes (containing admin data like username, permissions, and last sign-in)
- Enable self-service EA features and betas
Remember that every org must have at least one individually assigned super admin. If you just have one individually assigned super admin, you can't edit or revoke their super admin permissions.