XnadeemB.75534 (Customer) asked a question.
We are trying to reduce the number of OKTA Super Admins for our org.
We have created custom Roles for our System Admins but they said that they cannot access the View Logs tab on the users accounts. We looked for the specific permissions to view logs but could not find it. We then gave them the Report Admin role. They can now view the logs but they can also generate reports and download the reports. Is there anyway we can restrict the generating and downloading of reports and just allow the System Admins to view the user logs?
I understand from Okta support that this is not available at the moment but the Okta developers may need to add the level of granularity of having a role to just view the logs rather than run/generate and export/download the reports.
Could this be considered as a feature request in the next release.
Thanks
Hi @XnadeemB.75534 (Customer) , Thank you for reaching out to the Okta Community!
That is indeed not possible currently. You can suggest this type of restriction to be added as a Feature Enhancement on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Ask Away: OIG Product Experts Answer Your Questions Thru Thur., Dec 14