
BobR.01866 (Customer) asked a question.
Title. I have a manager in the org who is the owner of a SaaS app (we'll call it saasapp1). We use groups to assign users to apps, and we have a group for saasapp1. I would like this owner to add users to the saasapp1 group using the least amount of privilege. I made him an owner of the group as well as a Group Administrator that was scoped to only the app group, but he still can't seem to add users. He can drill all the way down but gets on error. How do I go about getting this done?

@BobR.01866 (Customer) - What is the specific error you are seeing?
Also, for the absolute "least" amount of privilege you might consider a Delegated Workflow. You could set it to be a OktaId or email as the input. And scope the delegated flow to only him. The actual assignment would happen as a super admin user but this (manager) user would have only access to the delegated flow.