Access certifications
Understand access certifications tool scopes, features, and capabilities, with sample workflows and example prompts.
Early Access release
- Tool name
okta_identity_governance- Okta scopes
okta.governance.accessCertifications.manageandokta.governance.accessCertifications.read
What you can do
- Create new access certification campaigns
- Launch campaigns to initiate the review process
- Retrieve campaign details and configuration
- Delete a campaign that has not yet been launched
- End an active campaign, closing all remaining reviews
- List reviews across campaigns
- Reassign pending reviews to a new reviewer
- Move campaigns through a full lifecycle, from creation through launch to end
- Paginate through campaign and review lists using a cursor
- Reduce LLM token usage with token-optimized TSV responses
- Restrict actions based on your granted OAuth scopes
Sample use cases
| Use case | Prompt | Result |
|---|---|---|
| It's quarter-end, and the admin needs to certify who still needs access to App A. The admin wants to start the campaign and make sure every review has an owner so nothing stalls. | Create a certification campaign for App A access, launch it, list its reviews, and reassign any unassigned review to a specific reviewer. | The campaign is created and launched, its reviews are listed, and any unassigned review is reassigned to the named reviewer. |
| The admin's App A certification has been running for a while. The admin wants to check whether any reviews are still open and, if everyone is done, close it out so it stops nagging reviewers. | Show me the details of the App A certification campaign, list its remaining reviews, and if none are pending, end the campaign. | The campaign details and remaining reviews are shown, and if nothing is pending the campaign is ended, confirmed by re-reading its status. |