Configure help desk administrators

Super admins can assign the help desk admin role to a user and scope that role to a group. See Help desk administrators.

1. In the Admin Console, go to SecurityAdministrators.

2. Click Add administrator. On the Administrator assignment by admin page:

   1. Type an administrator name into the Admin field.
   2. Select the Help Desk Administrator role.
   3. Type in the group name of the Okta groups the admin will control. You can also select Active Directory (AD) or LDAP groups in addition to Okta groups. This allows you to assign specific AD or LDAP groups for the Help Desk admin to handle.

3. Click Save Changes.

Configure help desk administrator for AD users

If you want your help desk administrator to perform operations on users that delegate authentication to AD, you'll also have to configure the AD policy:

1. In the Admin Console, go to SecurityAuthentication.

2. Select Active Directory Policy.

3. Edit the Legacy Rule to indicate that the user can change passwords.
4. Click Update Rule.

Next step

Guidance for structuring Okta groups