How to See Addition/Removal of Group Owners via System Log Event
Jan 12, 2026
Identity Governance
Okta Classic Engine
Okta Identity Engine
Overview
This article provides a System Log query for admins to find events relating to a User or Group being added or removed as a Group Owner.
Applies To
- Okta Identity Governance
- Group Owner Events
- System Log
Solution
It is possible to leverage the following query to find events relating to a User or Group being added/removed as a Group Owner in the System Logs:
displayMessage co "Group Owner"Or, if wanting to have it narrowed down against a particular group, add the target to the query and enter the related Okta Group Id:
displayMessage co "Group Owner" and target.id eq "00g12shxwy4zCCWUM1e7"
NOTE: In the example screenshot above, the "Removal event" shows the Target Group and the Group/User removed is under the DebugData. The addition (Update) event shows both the Target Group and the Target Group/User that was added in the Target column.
