Manage access request conditions

Early Access release. See Enable self-service features.

After you create an access request condition, you can enable, disable, view, and delete those conditions. You can also change their priority order:

Before you begin

  1. Sign in to the Admin Console as a super admin. Keep these considerations in mind before making any changes.

  2. In the Admin Console, go to SecurityAdministratorsGovernance.

  3. Click Access request to view the list of conditions and their status.

    4. Check that items you've referenced in a condition, such as groups and bundles, are active or available. If any of these items are deactivated or deleted, the condition becomes invalid when you enable or disable it or when a requester submits a request.

Enable a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.
  2. Click Enable.

After you enable the condition, requesters can request access to the admin roles governed by the condition and request approval is governed by the approval sequence you selected in the condition.

Ensure that users, groups, bundles, and sequences that you've referenced in a condition are active or available for use before you enable a condition. If any of these items are deactivated or deleted, the condition becomes invalid when you enable it or when a requester submits a request.

Disable a condition

  1. Open the options dropdown menu associated with a condition that has an Enabled status.
  2. Click Disable.

When you disable a condition, existing requests that use the condition aren’t impacted.

View a condition

  1. Open the options dropdown menu associated with a condition.
  2. Click View.

Delete a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.
  2. Click Delete.

Change priority order

Use the drag-and-drop handle for a condition to change its priority order.

The number associated with the condition defines its order of priority. Okta only considers the priority order for conditions that have an Enabled status.

If a requester meets the criteria for more than one condition, the condition with the highest priority determines which approval sequence is used to approve the request.

To understand the experience for requesters and approvers, see Request admin role assignmentManage requests and Manage tasks.

Related topic

Edit an approval sequence