8819m (8819m) asked a question.
Hello guys, my team has a bunch of applications which we want to use okta for authentication, some of them are short-lived which we'll use for quick experiments, and other ones are ever-lasting, but we might need to tweak (config changes, adding/removing users, etc.) overtime. We would like to use the okta terraform plugin to manage those.
However, our okta account manager is not willing to give us a full Application Administrator (all apps) api key, for security measures. So we would have to restrict our api access to our current apps and the ones we'll create in the future.
Beforehand we know that all of our application names will follow this format: {team}-{app}-{environment}
Is there a way to create an Application administrator in okta tied to a "wildcard" rule like: {team}-*, or something similar?
Cheers!
Hi Edmar,
Thats actually a good idea, but right now not available, your Okta admin will have to add the app to your admin rights set up.
Additional adminsitrating groups with apps wouldd be helpful, but also isnt a function right now.
You'll have to work alognside with your Okta admin to get admin access to new apps.
good luck