Request admin role assignment
Early Access release. See Enable self-service features.
Okta Access Requests allows users to request access to admin roles directly from the End-User Dashboard. This document describes the requester's experience of submitting admin role bundle access requests.
Requesters can also cancel a submitted request using the Access Requests web app if an approver or request assignee hasn't taken any action on it. Approvers receive a notification about the request cancellation based on the notification preferences that they've set up.
Users can follow these steps to submit requests:
- Depending on the Okta products you're subscribed to, requesters do either of the following steps on the End-User Dashboard:
- Click Request admin access; or
- Click Request access, and then select Okta Admin Console.
If a requester doesn't meet the criteria for any access request conditions but they're assigned to the Okta Access Requests app, they may get errors when they click Request admin access or Request access buttons. To avoid requesters encountering these errors, you can revoke their app assignment.
- Requesters select the admin role bundle that they need from the available option. The options available to them depend on the requester scope that you defined for the access request condition.
- They enter or select a response for required questions, and then click Submit request. Requesters can't modify answers to the questions after they submit the request.
Access Requests opens the details page. Users can update their request, communicate with approvers, or track the request status.
They can also cancel a submitted request if a team member or approver hasn't taken any action on it. They receive a notification about the cancellation based on the notification preferences that they've set up.
Access Requests also cancels a request if the requester's access to the Access Requests web app is revoked or their status in Okta changes to suspended or deactivated.