Okta Workflow "Remove User from group" Card Causes "403 Forbidden" Error
Jan 12, 2026
Workflows
Okta Classic Engine
Okta Identity Engine
Overview
403 Forbidden
You do not have permission to perform the requested action.
Applies To
- Okta Workflows
Cause
This error is thrown when the Workflow attempts to remove a user from a built_in or Application group. The Remove User from group card can only remove users from Okta groups.
Solution
Add conditional logic to ensure that the group type is OKTA_GROUP
For example, adding a Continue If card to confirm group type can be used as shown in the following screenshot:
