00uwqxphfHZZCGGKo351.5632069269073962E12 (TPICAP) asked a question.
What permissions is required to add/update a custom profile field for a active directory account using okta API
Hi,
Recently my existing okta api account is no longer able to edit a custom profile field. It used to work a couple of weeks ago but we are now receiving the error "errorCode: E0000006 | errorSummary: You do not have permission to perform the requested action"
The permissions of the API account has the roles:
Group Membership Administrator
Read-only Administrator
Group Administrator
Help Desk Administrator
ManuallyCreatedCustomRole
The Group Administrator is meant to be the role which grants the account those rights to edit the profile that used to work but not anymore.
See the original post below a year ago which solved the problem but no longer the case.
Regards,
Seng
Hi @00uwqxphfHZZCGGKo351.5632069269073962E12 (TPICAP) , Thank you for reaching out to the Okta Community!
If you are getting that error for all operations, please check that the API token is still valid.
If you are getting the error just for that particular operation, I would recommend checking to make sure that the user account that is supposed to be edited is member of a group that is managed by the respective roles, as the roles could be configured to manage just specific user groups not the entire organization.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
What you missed: new product releases and other announcements