<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content

Can Custom Admins Add or Remove Super Administrators To and From Groups

Okta Classic Engine
Okta Identity Engine
Administration

Overview

Custom Admins, regardless of their permissions and resources, cannot add or remove a Super Administrator to/from a Group. The same behaviour occurs whether trying to do it via UI or via API. 

  • If trying via AP, the following error is returned:

You do not have permission to perform the requested action

 

  • If trying in the Admin Console UI, the following message will appear.

 You do not have permission to perform the requested action

Applies To

  • Custom Admin Roles
  • Groups

Solution

By design, the ability to add/remove a Super Administrator to/from a Group is limited only to the following Standard Roles:

  • Super Administrators
  • Org Administrators
  • Group Administrators
  • Group Membership Administrators

NOTE: The Groups that have Administrator Roles assigned can be managed only by Super Administrators. 

Loading
Okta Support - Can Custom Admins Add or Remove Super Administrators To and From Groups