This article presents the specific custom admin role/permission that would allow an admin to see the "Disconnect from Active Directory" option in the More Actions drop-down on a user record.

• Okta Custom admin role 
• Custom Resource

To create a custom administrator role with the necessary permissions, configure the role and its corresponding resource set as follows.

1. Assign the following permissions to the custom administrator role:

   1. Edit the user's lifecycle states.

   2. View users and their details.

   3. Edit the user's application assignments.

   4. Edit the application's user assignments.

2. Assign the following to the resource set:
   • Applications: All Active Directory applications
   • Users: All users