Manage access request conditions

Early Access release. See Enable self-service features.

You can enable, disable, view, edit, and delete access request conditions, or change their priority order.

Before you begin

  1. Sign in to the Admin Console as a super admin or as a user with both access requests admin and app admin roles. Keep these Considerations in mind before making any changes.
  2. Enable the Access request conditions and Resource catalog feature.

  3. In the Admin Console, go to ApplicationsApplications.

  4. Select an app and go to the Access requests tab on the app’s profile page.

Enable a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Enable.

After you enable the condition, requesters can request access to the app and the access levels you specified in the condition. The request’s approval is handled by the steps defined in the approval sequence that you selected in the condition.

Check that items you've referenced in a condition, such as groups and bundles, are active or available. If any of these items are deactivated or deleted, the condition becomes invalid when you enable it or when a requester submits a request.

You can’t make changes to a condition that’s active. You must disable it before making changes. See Edit a condition.

Disable a condition

  1. Open the options dropdown menu associated with a condition that has an Enabled status.

  2. Click Disable.

When you disable a condition, existing requests that use the condition aren’t impacted.

You can make changes to a condition after you disable it.

View a condition

  1. Open the options dropdown menu associated with a condition.

  2. Click View.

Edit a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.

  2. Click Edit.

  3. Make the required changes. You can also select a different approval sequence, edit or delete it at this step.

    Changing a sequence impacts all other conditions that use it. Deleting a sequence can cause other conditions that use it to become invalid.

  4. Click Update.

Delete a condition

  1. Open the options dropdown menu associated with a condition that has a Disabled status.
  2. Click Delete.

Change priority order

The number that's associated with the condition defines its order of priority. Use the drag-and-drop handle for a condition to change its priority order.

Okta only considers the priority order for conditions that have an Enabled status. If a requester meets the criteria for more than one condition, the condition with the highest priority determines which approval sequence is used to approve the request and which access duration is applied.

To understand the experience for requesters, request assignees, and approvers, see Create requests, Manage requests, and Manage tasks.

Related topic

Configure an approval sequence