Okta Custom Admin Role Generates an Error When Viewing or Managing Devices

A custom administrator role with permission to manage devices generates an error when viewing the devices page because the resource set lacks the resource for all devices. Adding the all devices resource to the resource set and updating the administrator assignment resolves the error. The observable symptom is the following error message appearing when the administrator accesses the devices page:

You do not have permission to perform the requested action

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Custom Administrator Role

A resource set configuration issue causes the error. The resource set must contain the resource for all devices. If the resource set lacks this configuration, Okta generates the You do not have permission to perform the requested action error.

How is the custom administrator role configured to view and manage devices?

Add the all devices resource to the resource set and update the administrator assignment in the Admin Console.

1. Sign in to the Oka Admin Console.
2. Navigate to Security > Administrators > Resource Set.
3. Edit the resource set and click Add another resource type located under the existing resources.
4. Select All Devices from the Devices dropdown menu as shown in the following image.
   
5. Add the resource and click Save.
6. Navigate to the Admins tab.
7. Click Edit > Edit Assignments.
8. Modify the resource set for the device management role to include the newly configured resource set.
9. Click Save.
10. Test the change by signing in to the administrator account on a different browser or incognito window.