Okta Report Administrator Cannot View the Admin Role Assignments Report

A Report Administrator cannot generate or view the Admin Role Assignment report because the role lacks the necessary permissions. This report requires visibility into the Identity and Access Management resources, which the Report Administrator role does not cover. Assigning the Read-Only Administrator role and creating a custom administrator role with the appropriate permissions resolves the issue.

• Okta Identity Engine (OIE)
  
• Administrator Roles
• Reports

The Report Administrator role does not include the permission to view the Admin role assignment report. That report specifically requires visibility into the Identity and Access Management resources, which the Report Administrator role does not cover.

How is access granted to view the Admin Role Assignment report?

Grant access to view the Admin Role Assignment report by assigning the Read-Only Administrator role and creating a custom administrator role with the necessary permissions.

1. Assign the Read-Only Administrator role to the user.
2. Create a Custom Administrator role that includes: Identity and Access Management (View roles, resources, and admin assignments).
3. Create a resource set that contains Identity and Access Management > All Identity and Access Management resources.
4. Assign the Custom Role and the Resource set to the user.
5. View the Admin Role Assignment report.