vnyab (vnyab) asked a question.
Group administrator can change user profile information of another group using Import Users From CSV
Group administrators can not create new users using Import Users From CSV, but can change user profile user profile information
For example,
The group administrator of group A can change the user Pofile of the user of group B using the Import Users From CSV.
If the group administrator of group A knows only the user ID of the user of group B, the user Pofile can change.
I think it is a problem to be able to change information on users who are not managed. Please tell me the procedure to prohibit this.
Best Regards.
Hi Tamami,
If the group administrator of group A can edit a user profile from another group and the option Can administer user in specific groups is selected, I would suggest to open a support ticket, since this issue needs to be investigated. More details the Group Admin roles can be found here, https://help.okta.com/en/prod/Content/Topics/Security/The_User_Admin_Role.htm?cshid=ext_The_User_Admin_Role
Thank you,
Alexandru Neaga
Technical Support Engineer