JasonA.65922 (Customer) asked a question.
permission to reset account without being an administrator
Is there a way to give a technician the ability to reset the MFA method for a user without giving them full blow admin privileges?
- 00usezlqsHdQlhvV9351.5615771738102039E12 (Customer)
Your best bet is to grant them "Help Desk Admin" role so they can reset MFA for users. They will not have full blown super admin rights but will allow them to perform a smaller subset of user related admin tasks.
Here is the matrix for what it actually grants:
Expand Post- JasonA.65922 (Customer)Thanks. Feel free to close this ticket.
Jason Asuncion
IT Operations Services Manager
(650) 376-0680 (office)
Submit Help Desk tickets at http://servicedesk.theabdteam.com<http://servicedesk.theabdteam.com/> or call 888-642-2234 x2, x8 (5 AM PST – 5 PM PST)
ABD Insurance & Financial Services, Inc.
3 Waters Park Drive, Suite 100
San Mateo, CA 94403
View our privacy policy<http://www.theabdteam.com/company/privacy-policy> to learn how we protect your data under GDPR and CCPA.Expand Post
This question is closed.
Your best bet is to grant them "Help Desk Admin" role so they can reset MFA for users. They will not have full blown super admin rights but will allow them to perform a smaller subset of user related admin tasks.
Here is the matrix for what it actually grants:
https://help.okta.com/en/prev/Content/Topics/Security/Administrators.htm?cshid=Security_Administrators#Security_Administrators