An error occurs when an administrator enables the Govern Okta admin roles feature because a team named Okta Super Admins already exists in the Access Requests application. Rename the existing team and re-enable the feature to resolve the issue. When an administrator attempts to enable the Govern Okta admin roles feature, the event appears successful, but the following error displays under Access Requests.

We are unable to provision access requests for your organization

The following image displays the error message in the Access Requests application.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Okta Identity Governance (OIG)
• Govern Okta admin roles

The issue occurs because Okta enforces a unique team name constraint. When an administrator enables the Govern Okta admin roles feature, Okta attempts to create an internally managed team called Okta Super Admins. If an administrator previously enabled the Okta Identity Governance (OIG) Access Requests experience and created a team named Okta Super Admins, Okta generates an error.

How is the Govern Okta admin roles feature enabled successfully?

Disable the feature in the Okta Admin Console, rename the existing Okta Super Admins team in the Access Requests application, and re-enable the feature.

1. In the Okta Admin Console, navigate to Settings > Features.
2. Disable the Govern Okta admin roles feature.
3. Navigate to the Access Requests application.
4. Select Teams.
5. Rename the Okta Super Admins team to a different name.
6. Save the changes.
7. In the Okta Admin Console, navigate to Settings > Features.
8. Enable the Govern Okta admin roles feature.

Related References

• Govern Okta admin roles