Assign delegate from the Admin Console

You and users can assign another user as a delegate to complete governance tasks for them. Governance tasks include access certification campaign review items and access request approvals, questions, and tasks.

Before you begin

  • You must be a super admin.

Start this task

  1. In the Admin Console, go to DirectoryPeople.

  2. Search and select a user.

  3. On the user's profile page, go to the Delegate tab.

  4. Click Assign a delegate.

  5. Specify the delegate user.

  6. Optional. Select Delegate for specific duration and enter a start and end date.

  7. Optional. Add a note to the delegate.

  8. Click Save.

After you assign a delegate, all governance tasks are rerouted to the delegate. If you specified a duration, then the governance tasks are rerouted to the delegate only for that time period.

When you assign or change a delegate, existing access certification campaign reviews and tasks for access requests assigned to the user (or the previous delegate) aren't delegated. The user must reassign these tasks themselves. See Reassign review items or Manage tasks.

Users can see the delegate assignment information from the Access Certification Reviews or Okta Access Requests app. To allow them to add, change, or remove their delegate themselves, turn on the Enable end users to assign their own delegate toggle from the Settings page. You can also constrain the delegate selection to the user's manager, the user's manager and colleagues, or allow the users (non-admins) to select anyone in the org as a delegate. However, as a super admin, you can assign any user as a delegate, regardless of the restrictions you apply to users. See Enable end users to assign delegates.

For example, even if you've restricted the delegate selection to the user's manager, you can assign the user's colleague as their delegate. However, because this delegate isn't on the allowed list of delegates, the user can view and remove the delegate but they can't edit the assignment.

To understand the user experience of viewing or changing their delegates, see Manage delegates.