Manage access request conditions

Early Access release. See Enable self-service features.

You can enable, disable, view, edit, and delete access request conditions, or change their priority order.

Before you begin

  1. Sign in to the Admin Console as a super admin. Keep these considerations in mind before making any changes.

  2. In the Admin Console, go to SecurityAdministratorsGovernance.

  3. Click Access request to view the list of conditions and their status.

    Check that items you've referenced in a condition, such as groups and bundles, are active or available. If any of these items are deactivated or deleted, the condition becomes invalid when you enable or disable it or when a requester submits a request.

Enable a condition

Ensure that users, groups, bundles, and sequences that you've referenced in a condition are active or available for use before you enable a condition. If any of these items are deactivated or deleted, the condition becomes invalid when you enable it or when a requester submits a request.

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Enable.

After you enable the condition, requesters can request access to the admin roles governed by the condition. Request approval is governed by the approval sequence you selected in the condition.

Disable a condition

You can't make changes to a condition that's active. You must disable it before making changes.

  1. Open the options dropdown menu associated with a condition that has an Enabled status.

  2. Click Disable.

When you disable a condition, existing requests that use the condition aren't affected.

View a condition

  1. Open the options dropdown menu associated with a condition.

  2. Click View.

Edit a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Edit.

  3. Make the required changes. You can also select a different approval sequence or edit an approval sequence at this step.

    Changing a sequence impacts all other conditions that use it. Deleting a sequence can cause other conditions that use it to become invalid.

  4. Click Update.

Delete a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Delete.

Change priority order

The number associated with the condition defines its order of priority. Use the drag-and-drop handle for a condition to change its priority order.

Okta only considers the priority order for conditions that have an Enabled status. If a requester meets the criteria for more than one condition, the condition with the highest priority determines which approval sequence is used to approve the request and which access duration is applied.

To understand the experience for requesters and approvers, see Manage requests and Manage tasks.

Related topic

Manage an approval sequence