MatthewH.10249 (State of Iowa) asked a question.
Are there any issues or downsides to having multiple groups assigned to an app in Okta that each contain some of the same users?
For example if there were several groups assigned to a custom OIDC app with one group consisting of all users on the tenant and another groups each having a subset of users for things like admins, read only, etc.
At first I just assigned the "all users" group to the app so that everyone had an app card on their Okta Dashboard but because the other groups were created specifically for the app I wanted to assign each group to the app to make it easier to find what groups had a relationship used by the app via OIDC claims. When I assign all the groups I'm not noticing any issues but I'm reaching out to the Okta community for any details on issues I just might not be seeing or things to consider before considering leaving things this way.
Thanks for your time and input!
Hello @MatthewH.10249 (State of Iowa) ,
I hope you are having a great day
Thank you for posting your question.
When a user is a member of more than one group assigned to the application, group priority determines which Profile and Role data they receive therefore Okta will be using the priority profile to avoid any possible issue.
You can check this information in the following link:
https://help.okta.com/en/prod/Content/Topics/users-groups-profiles/usgp-prioritize-app-group.htm
Please let us know if this was useful and clarify your question.
Have a great day ahead
Regards
Daniela Chavarria
Okta Inc