Does Okta Support Partial App Assignment, Revoke or Removal During User Deactivation
Jan 10, 2025
Okta Classic Engine
Okta Identity Engine
Lifecycle Management
Okta Integration Network
Overview
Does Okta offer support for partial/selective app assignment revoke/removal during user deactivation?
Applies To
- Account Status
- User Deactivation
- App Assignments
Solution
Currently, there is no way to selectively retain one or more particular app assignments from the deactivated user. Okta will trigger "remove app assignments" jobs as part of the Okta user account deactivation process, which will remove all currently assigned app assignments.
The only Okta user status changed event that does not revoke and remove any app assignment is when Okta Admin suspends a user, as seen from the above table chart.
Please do keep in mind that all app assignments for the deactivated user will be removed from the deactivated user account by product design.
If Admins do not want any app assignment removed from the user, please use suspend user instead of deactivate user.
