Is it Possible to Remove "Reset Password" Permissions from the Help Desk Administrator Role
Nov 19, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article discusses whether it is possible to remove reset password permissions from the Help Desk Administrator role.
Applies To
- Security
- Administration
- HelpDesk Administrators
- Okta Classic Engine
Solution
Help Desk administrators have the following fixed permissions that cannot be changed:
- Reset password
- Create a temporary password for users in a Pending status
- Reset Multi-Factor Authentication
- Unlock account
- Clear user session
- View user profiles in the groups to which the admin has been assigned
