Manage resource collection assignments
You can manage resource collection assignments. This includes assigning collections to users, unassigning them, and setting an expiration for a resource collection.
Users with any of the following statuses can be assigned to a collection:
- Active
- Staged
- Locked out
- Password expired
- Password reset
Before you begin
- Sign in as a super admin or an admin with the following permissions:
- Manage applications
- Manage collections
- Edit application's user assignments
- Edit groups' application assignments or Edit users' application assignments
- Ensure that you're assigned to the Okta Entitlement Management, Okta Access Requests, and Okta Access Requests Admin apps.
See Custom admin roles and Role permissions.
Assign a resource collection to a user
- In the Admin Console, go to .
- Search for the collection that you want to assign to a user. Click View for that collection.
- Click the Assignments tab and then click Assign users.
- Search for the user to whom you want to assign the collection and click their entry. Their name is added to the list of selected users.
- Optional. Repeat the previous step to assign more users to the resource collection.
- Click Save. A message appears to confirm that the collection is assigned to the user.
Unassign a resource collection from a user
- In the Admin Console, go to .
- Search for the collection that you want to unassign from a user. Click View for that collection.
- Click the Assignments tab.
- Search for the user from whom you want to unassign the collection. Click Unassign from the action menu for that user.
- Click Unassign. A message appears to confirm that the collection was unassigned from the user.
Set an expiration for a resource collection
Follow these steps to set the time after which a user loses their access to a resource collection.
- In the Admin Console, go to .
- Search for the collection whose expiration you want to edit for a user. Click View for that collection.
- Click the Assignments tab.
- Search for the user whose access to the resource collection you want to set. Click Edit expiration from the action menu for that user.
- You can choose to have the user never lose access or have their access expire after a specific date and time.
- Select Never to allow the user to always access the collection.
- Select On to set an expiration date and time after which the user loses access to the collection. Enter the date, time, and time zone of the expiration. The Assignment Source column of the Assignments tab displays the remaining time before a user's access expires.
- Click Save.