Read-only administrators

Read-only admins have view access to most data in the Admin Console. Like report admins, read-only admins are unable to edit data. The only settings that read-only admins can change are their own notifications and API token settings.

Read-only admins can view the following:

  • Users
  • Groups
  • Apps and app instances
  • Reports
  • Okta settings
  • System Log
  • Authorization server scope
  • Device Trust enablement settings
  • Wifi policies
  • Device details
  • Sign-on policies
  • User profile policies
  • Inline hooks

For a complete view of all of the permissions that are granted and excluded from this role, see Standard administrator roles and permissions.

Related topics

Standard administrator roles and permissions

Use standard roles