User App Access report
Use this report to view who can access applications and how the access was granted. You can also monitor their resource usage to help meet your org's audit and compliance requirements.
To view users that were recently unassigned from an application, see Recently unassigned users.
Before you begin
Ensure that these conditions are in place:
- You are signed in as a super admin, org admin, read-only admin, mobile admin, or reports admin.
- You have applications assigned to users.
- Your browser's pop-up blocker is disabled.
Get report
- In the Admin Console, go to .
- In the Entitlements and Access section, click User app access.
- Click Edit Filters.
- Select one of the following fields, choose an operator, and then enter an appropriate value:
Field Value App assigned Filter by the date on which the app was assigned to users. Select a date if the operator is before or after. App assignment type Filter by app assignments that were given to a group or to individuals. Select Group or Individual. Application Filter by the names of applications that were assigned to users. Select one or more applications. Application catalog name Filter by the name of the catalog that the app belongs to. Enter an application catalog name. Application name Filter by the name of the application. Enter an application name. Application username Filter by the name of the application-specific username. Enter an application-specific username. Group Filter by the names of groups through which users were assigned to the app. Select one or more groups. Group membership type Filter by the user's membership type in the group. Select one or more group membership types. Group name Filter by the name of the group. Enter a group's name. Group source Filter by the name of the group's source. Select a group's source. Okta username Filter by the Okta username. Enter an Okta-specific username. This is usually an email address. Okta user status Filter by the user's Okta status. Select one or more statuses. Recently accessed Filter by the date range of when users last accessed the app. Sign On Mode
Filter by the authentication protocol used by users to sign in.
User Filter by the names of users. Select one or more users. User fullname Filter by the name of the user. Enter the full name of a user. The Last password change field shows the date a user last changed their password. You can't filter by this field.
- Optional. Click Add Filter to add more filters, or click X to remove a filter.
- Click Apply to view the report.
To download the report, click CSV Export.
The source data for this report is refreshed periodically throughout the day. A change that has occurred since the last refresh may not be reflected yet.