This article explains why some groups that have Administrator roles assigned have applications that are visible in the Group overview but not under the Group details.
- Okta Groups
- Super Administrator role
- Application assignment
By design, applications will also be automatically assigned to groups when administrator roles are assigned.
Looking at each group's assigned applications, some will show up, but some will not be visible at all. The applications are different depending on the role.
- Super Administrator Role assigned to Group.
For groups that have the Super Administrator role assigned, the applications that will appear in the counter are Okta Admin Console, Okta Agent Registration, and, if available, Okta Workflows and Okta Workflows OAuth.
On the Group settings, when navigating to the Applications tab, only two or no applications will be visible.
The easiest way to see the rest of the applications being assigned is by filtering the System Logs. For the example group provided in the screenshot above, the query to be used is:
target.displayName eq "Super Administrators" and eventType eq "group.application_assignment.add"
Where target.displayName value is the name of the group.
- Help Desk Administrator Role assigned to Group.
For groups that have the Help Desk Admin role assigned, the application that will appear in the counter is Okta Admin Console. However, in the Group settings, when navigating to the Applications tab, the Okta Admin Console is not visible.
The easiest way to see the application being assigned is by filtering the System Logs. For the example group provided in the screenshot above, the query to be used is:
target.displayName eq "HelpDesk Administrators" and eventType eq "group.application_assignment.add"
Where target.displayName value is the name of the group.
NOTE:
- While the Okta Admin Console and Okta Workflows applications can be searched in the Admin Console under Applications > Applications, the Okta Agent Registration app will not be returned. For more information on this app, please review the article linked in the Related References below.
- If the group was created more than 90 days ago, the query will not return any details due to the Data Retention Policy.
