00uljxagflVREYsrn351.5578706922750068E12 (Customer) asked a question.
Group Admin Role Limitation on Add/Remove Users
We were hoping that the Group Admin Role, when permissions are specified to specific named groups, would allow those admins to add/remove users from the specified groups. It seems however, that this setting only allows the admin to add "new users" to the specified groups. They are not allowed to add/remove existing users.
Are we understanding that limitation correctly? Is there anyway to specify an admin with rights to add/remove users only to specific groups, via the UI or API, or is this right only provided to users with the full Group Administrator role?
Hello Jack,
Thank you for posting your question in the community forum. If the group admin is for all the users then the group admin can add and remove any users from the group. If the admin is for a specific group then admin should be able to create a user and add them to the groups they manage. They can also remove the members from the group. But they will not be able to add any existing user to the group.
The present functionality works like this and I hope I this helps you. If you have any questions or need any additional assistance in setting up the permissions kindly contact Okta support and an Engineer will assist you with the set up.
Thank you.