Users with Custom Roles are Unable to Create or View Okta Device Access Recovery PIN
Last Updated:
Okta Identity Engine
Multi-Factor Authentication
Overview
This article explains why users with custom admin roles are unable to create or view Okta Device Access recovery PIN.
Applies To
- Desktop MFA
- Device Access
- Okta Identity Engine (OIE)
Solution
The admin must have the appropriate permissions to create or view recovery PINs. If using a custom admin role, OKTA_DEVICES_MANAGE permission is required.
See Desktop MFA Recovery - Prerequisites for reference.
