Limit on the Number of Groups an Okta User Can Be Assigned To
Last Updated:
Overview
There is no limit to the number of groups a user can be assigned to in Okta. However, limits apply when assigning users to groups via group rules or when integrating with Active Directory (AD).
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Groups
- Active Directory (AD)
Solution
Is there a limit to the number of groups a user can be assigned to in Okta?
There is no documented limit on the number of groups that a user can be assigned to in Okta. A user can be assigned to as many Okta groups as needed. However, there is a limit to the number of groups a user can be assigned in Active Directory (AD) as it relates to the number of Security Identifiers (SIDs) that AD supports that can be associated with a user.
The only group limit within Okta applies when a user is assigned or excluded from a group via a group rule. A group rule can be created to assign a user to a group or exclude them from a group.
- A user can be assigned to a maximum of 100 groups via a group rule.
- A maximum of 100 users can be excluded from a rule.
