Create an admin role assignment using an admin

This is an Early Access feature. To enable it, go to Settings > Features in the Okta Admin Console and turn on Custom Administrator Roles.

Before you begin

Start this task

You can begin creating an admin role assignment from any of the following places in the Admin Console:

From the Admin tab

  1. In the Admin Console, go to Security > Administrators.

  2. On the Administrators page, go to the Admins tab.

  3. Click Add Administrator.

  4. On the Administrator Assignment by Admin page, in the Admin field, enter the user’s or group's name.

Note

If you don’t have a previously created role or resource set, click Create new to create them.

From the Overview tab

  1. In the Admin Console, go to Security > Administrators.

  2. On the Administrators page, go to the Overview tab.

  3. Click Add Administrator.

  4. On the Administrator Assignment by Admin page, in the Admin field, enter the user's or group's name.

Note

If you don’t have a previously created role or resource set, click Create new to create them.

From the user's profile page

  1. In the Admin Console, go to Directory > Users.
  2. Select the required user and navigate to the user’s profile page. Alternatively, go directly to the user’s profile by searching for the user from the search bar on the Overview tab of the Administrators page.

  3. Go to the Admin Permissions tab.

  4. If the user doesn’t have any existing admin role assignments, click Add admin assignment. If the user already has existing admin assignments, click Edit assignment.

The Administrator Assignment by Admin page opens with the user name populated in the Admin field.

From the group's page

  1. In the Admin Console, go to Directory > Groups and navigate to the group’s profile page. Alternatively, go directly to the group’s profile by searching for the group from the search bar on the Overview tab of the Administrators page.

  2. Go to the Admin Roles tab.

  3. If the group doesn’t have any existing admin role assignments, click Add admin assignment. If the group already has existing admin assignments, click Edit assignment.

The Administrator Assignment by Admin page opens with the group name populated in the Admin field.

Continue with the task

  1. On the Administrator Assignment by Admin page, go to the Complete the assignment section.

  2. Select:

    • The role you want to assign to your admin. You can also create a new role by clicking Create role from the drop down box.

    • The resource set that you want to constrain the admin to. You can create a new resource set by clicking Create resource set from the drop down box. You can also preview the resources assigned here.

  3. Click Save changes.

Note
  • You can save an admin assignment even if it includes resources that aren't affected by the permissions. It will not break the admin assignment.

  • You can also add, edit, and delete assignments from this section for the given admin.