This article will provide steps to take when the Okta Admin receives the following error message running Active Directory (AD) import:

The permission 'Org:User:Profile:EditProfile' is needed to continue.

• Directories
• Active Directory Import
• Custom Admin Roles
• Okta Identity Engine (OIE)

The Admin running the import does not have sufficient permissions to update the Okta user profile, which is required to run an AD Import.

The Okta Admin with custom admin roles has no permission to update the Okta User profile attribute from AD to Okta. For an import to update the User profile, the following Role permissions are required:

• Org Admin
• App Admin

See How to Create Custom Admin Roles for more details on creating or modifying a role to include these permissions.

Related References

• Standard administrator roles and permissions
• Admin Role Requirements for Application Imports