LloydJ.99915 (Customer) asked a question.
Create a user with specific access, without giving admin rights
We need to provide a user the following type of access but we don't want to give Admin rights:
- He will need to be able to create groups
- He will need to be able to add his application to OKT and manager it
- He needs to be able to create users and give them access only to his Application.
We don't want to provide admin right and want to know if it will be possible to lock it down to the specific application that he will have to manage.
Hi!
Please keep in mind that although the scenario you are describing would require an admin account, you have full control over how to scope down the access and capabilities of said account. But, the recipient would have the "Admin" link at the top right of their dashboard.
Now to accomplish this, you can leverage Okta's custom admin roles capabilities. This will allow you to specify what the account can do to users, groups, auth servers, applications, and more. Everything that you describe can be achieved via this capability. I use it currently in my own org and it works brilliantly for those users that need to manage very specific things in Okta, but are not administrators of Okta itself for the org. In this case, they would manage, in addition to only being able to view, what you assign them.
Please see the link below for more information:
Custom administrator roles
Thank you so much for the reply and I really value when people take the time to assist. I recently started at this company and this is my first time using Okta so I am still finding and understanding the setup in our scenario, as the person who setup this whole environment has left without any really documentation.
I will go through the document.
Thank you so much for making my experience in the community such a positive one.
Regards
Lloyd
Good luck! Please continue to ask questions and all of us will assist however possible. Thanks!