User16370330549592969269 (Customer Support Online Experience) asked a question.
What is Govern Okta Admin Roles, and how will Okta’s latest security feature enhance access governance within your organization? Govern Okta Admin Roles is an enhancement to custom admin roles within the Workforce Identity Cloud, enabling customers to manage administrator access by requiring approvals and limiting standing access. IT teams can restrict admin access to specific users and time periods, aligning with the principle of least privilege. By making admin roles requestable rather than permanent, organizations can implement enhanced security measures, including temporary assignments and certifications.
What can I expect to learn?
Okta product experts will answer all your burning questions, from the benefits of implementing Govern Okta Admin Roles to strengthen security to real-world examples and best practices for effective role management to insights into the upcoming Access Requests feature.
How will it work?
Ask questions from today to Wednesday, June 12, 2024. Please use the 'Answer' button below to ask your questions.
Come back on Thursday, June 13, 2024, from 9 a.m. to 11 a.m. PST to join the online session as our Okta Product and Security experts provide written, comprehensive answers to your questions.
Want to learn more details about this AMA session? Check out this blog article -> https://support.okta.com/help/s/blog/a674z000000145VAAQ/june-13-governing-okta-admin-roles-ama?language=en_US
Awesome! Thanks for the heads up!
Thank you Leila!
I noticed Super Admin being in the list of Admin Roles to choose from when creating the Admin Role Bundle. I see there could be a risk having all your Super Admins being locked out if one Approvers in the approval workflow is no longer available. What is the best practice to ensure Super Admins won't get locked out?
Hi @srdavis1.549735853491651E12 (Peabody Energy) , we recommend customers use super admin role for break-glass scenarios only and not for day to day operations. The other out of the box and custom roles should be used for administering Okta and if you see any gaps there, please feel free to bring those to our attention. However, if a super admin is locked out, another super admin should be able to let them back in. If there is one only super admin and they get locked out, you can reach out to our support. Hope this helps.
Will there be a recording available for this session? I would love to join it live, but unfortunately it will be 2am in my timezone. Thanks!
Hi @BrunoI.41014 (Customer) Thank you so much for reaching out! This is an online interactive event, so there’s no Zoom link. On June 13 at 9 AM PST, our Okta product experts will log in and provide comprehensive written answers to all questions posted in this discussion thread. They will also be available to answer any follow-up questions until 11 AM PST. Feel free to submit your written questions directly here. I hope this clears up any confusion. Thanks!
Thank you Leila!
@LeotrimD.36274 (Bynder) Thank you so much for reaching out! This is an online interactive event, so there’s no Zoom link. On June 13 at 9 AM PST, our Okta product experts will log in and provide comprehensive written answers to all questions posted in this discussion thread. They will also be available to answer any follow-up questions until 11 AM PST. Feel free to submit your written questions directly here. I hope this clears up any confusion. Thanks!
Looking forward to this session! Here's a few questions I'd like to get answered as I learn more about this feature:
@KarenR.11500 (Okta - Global Customer Support) Under Settings / Features in your Okta tenant. You'll see it there. Its in alphabetic order.
Why? Govern for Admin roles allows you to better enforce Least Privilege by making admin roles request able for those that don't need them full time. It also allows you to run certification campaigns on existing admin roles in an automated fashion.
Where? https://help.okta.com/en-us/content/topics/security/governance-admin-roles/govern-admin-roles.htm
It's really a great features!