<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00008djGTBCA2Okta Classic EngineAdministrationAnswered2026-05-01T09:01:18.000Z2023-01-06T22:48:53.000Z2023-01-10T21:55:12.000Z

dse7i (dse7i) asked a question.

Which custom role permission allows an admin to enroll a FIDO2 Security Key for a user?

Can a custom role be created such that it can be used to enroll a FIDO2 Security Key for a user?

 

https://support.okta.com/help/s/article/What-admin-permissions-are-required-to-enroll-FIDO2-security-key-on-behalf-of-user?language=en_US claims that only super and org admins can do this would be annoying.


  • Paul S. (Okta, Inc.)

    Hello @dse7i (dse7i)​ Thank you for reacting out to our Community!

     

    You can enroll/reset this factor as a user, the article mentioned states that only Super Admin and Org Admin can do it on behalf of the user.

    I hope that answers you question.

     

    The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best
  • dse7i (dse7i)

    It looks like the `okta.users.credentials.resetFactors` is sufficient to enable this (at least in my OIE test tenant).

  • Paul S. (Okta, Inc.)

    Hello @dse7i (dse7i)​ Thank you for reacting out to our Community!

     

    You can enroll/reset this factor as a user, the article mentioned states that only Super Admin and Org Admin can do it on behalf of the user.

    I hope that answers you question.

     

    The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.

    Community members help others by clicking Upvote or Select as Best on responses. Try it today.

    Expand Post
    Selected as Best
This question is closed.
Loading
Which custom role permission allows an admin to enroll a FIDO2 Security Key for a user?