Manage Okta Support Center User Accounts
Last Updated:
Overview
By default, Okta provisions all Okta Administrators to the Okta Support Center to access authenticated content. Administrators can manage users, including creating, updating, and deactivating accounts, via the Okta Admin Console. Managing Okta Support Center user accounts involves configuring administrator roles, deactivating users, and handling self-registered Okta Community members.
Applies To
- Okta Identity Engine (OIE)
- Okta Classic Engine
- Okta Administrators
- Okta Support Center
Solution
How are Okta Administrator accounts created?
Super Administrators can create, modify, and manage all administrators in an organization. Review the Administrators documentation to learn more about administrator roles.
Okta recommends minimizing the number of administrators and Super Administrators and using custom administrator roles to minimally scope the permissions required by administrator users to accomplish privileged tasks.
How to deactivate an Okta Administrator account?
Administrators can deactivate and delete Okta Administrator users by following the Deactivate and delete user accounts documentation. A deactivated Okta Administrator no longer has access to the Okta Support Center, which includes access to view and create cases.
NOTE: Okta synchronizes most changes made to Okta Administrators within the Okta Admin Console with the Customer Support System and Okta Support Center. Okta tags administrators deactivated by Super Administrators as inactive in the Customer Support System, resulting in a loss of access. If an administrator user account is deactivated or a user has all administrator roles revoked, the user account loses access to the Okta Support Center to submit and view support cases for that Okta organization.
The following video outlines the steps for deactivating and deleting a user in Okta:
How are Okta Administrator roles revoked from a user?
By revoking all Okta Administrator roles assigned to a user, an active Okta user loses all administrator privileges and no longer has access to the Okta Support Center. Revoke administrator roles from the Okta Admin Console by navigating to the Administrators section and modifying the user privileges.
- Within the Okta Admin Console, navigate to Security > Administrators.
- Choose the Admins tab to modify the user roles.
How to prevent an Okta Administrator from being provisioned to the Okta Support Center?
Organizations can use the Third-Party Administrators functionality to prevent specific administrators from being provisioned to the Okta Support Center and Okta Support System. When using this feature, an administrator performs actions allowed by the Okta Administrator role in the organization but does not receive access to the Okta Support Center. These administrators cannot view, create, or manage cases, nor do they receive Okta communications such as release notes.
If an administrator is initially set up as a Third-Party Administrator, Okta prevents the user from being synchronized with the Okta Support Center. If an administrator is initially set up as a standard administrator and later updated to a Third-Party Administrator, the user exists in the Okta Support System but cannot perform any actions.
How do users self-register for the Okta Community?
Self-registration provides users the ability to engage in the Okta Customer Community through creating, replying to, and liking posts. This includes submitting a feature request via Okta Ideas. Create a new community user by navigating to the Okta Support Center and completing the registration process.
- Navigate to support.okta.com.
- Select the Log in button on the top right-hand of the page.
- Follow the steps on the page to complete registration.
How to request to deactivate a Community User Account?
Send a request via email to community@okta.com and provide the user name, email address, and company name, and indicate the request is to deactivate the Okta Customer Community Account. Deactivated accounts lose access to the Okta Support Center. This action cannot be undone once requested.
Review the Manage users documentation for a full list of actions available to manage users.
