Which Okta Admin Role is Required to Use Access Testing Tool
May 26, 2026
Administration
Okta Identity Engine
Overview
This article clarifies the minimum role required to access and use the Access Testing Tool.
Applies To
- Okta Identity Engine (OIE)
- Administrator Roles
- Access Testing Tool
Solution
The minimum required role to use the Access Testing Tool is Read-only Admin because this role includes permissions to "View and run reports" and "View authentication policies".
Because Read-only Admins do not have permission to "View Profile Enrollment", the Access Testing Tool may not function as expected when run by a user granted only the Read-only Admin role.
For this reason, the Super Admin role is suggested when using the Access Testing Tool.
