Ways to Manage Users - Methods to Add Users in Okta Groups
Last Updated:
Overview
Okta provides multiple methods to assign users to groups, including manual assignment, application imports, directory synchronization, group rules, Application Programming Interfaces (APIs), Comma-Separated Values (CSV) imports, and group push. Administrators can choose the appropriate method based on the scale of the assignment and the source of the user data.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Lifecycle Management
- Groups
- Group Membership
Solution
How are users manually assigned to groups?
Manual assignment provides precise control over group memberships, allowing administrators to directly add or remove users. This method suits small-scale or critical assignments requiring direct oversight.
- In the Okta Admin Console, go to Directory > Groups.
- Select the group to which the users should be added.
- Select the People tab within the selected group.
- Select Add Person to open a dialog box.
- Search for the user by typing their name or email.
- Select the user from the search results and select Add to include them in the group.
- Optionally, assign a role to the user within the group to set specific permissions.
- Select Done to confirm the group assignment.
To assign a group to all users in the Okta organization, select More Actions, then select Assign all people in org.
How are users and groups imported from applications?
Importing users and groups is useful when bulk importing or synchronizing existing user data from an external source. Group import is enabled by default. Administrators cannot edit the memberships of these imported groups in Okta; they must change them in the source.
- In the Okta Admin Console, go to Applications > Applications.
- Select a provisioning-enabled application.
- Select the Provisioning tab and select Integration in the Settings list.
- Select Edit.
- Select the Import Groups checkbox if it is not enabled by default.
- Select Save.
Review the Automated and Programmatic Methods for Managing Group Memberships
Administrators can use the following methods to automate group assignments or manage memberships programmatically.
- Directory Group Sync: This feature allows the synchronization and import of users and groups from a directory into Okta. Users part of the imported groups retain their membership from the directory source.
- Group Rules: Group rules allow users to be dynamically assigned to groups based on certain conditions, providing a flexible way to automate group assignments based on user attributes or membership in other groups. Administrators can use Okta Expression Language in group rules to customize logic. Review the Expressions in group rules for information on expressions in group rules and Okta Group Rule Limitations and Restrictions for group rule requirements and limits.
- APIs and SDKs: Check the Okta API reference portal for comprehensive information on using Okta APIs to manage users and groups programmatically. This method is ideal for integrating Okta functionalities into custom applications or scripts.
- CSV Import: Administrators can bulk assign people to a group using a CSV file that lists the intended group members' Okta usernames or Okta user IDs. This method suits administrators who prefer working with spreadsheet applications or who have an existing service that does not support API requests. Review the How to Add Multiple Users to a Group Using a CSV File documentation for instructions on adding multiple users to a group using a CSV file.
- Group Push: If using Okta Org2Org, Group Push simplifies the management of group memberships by automatically pushing the configured groups from the source organization. This maintains consistent access across various applications in multiple organizations.
