KaeleyS.95699 (Customer) asked a question.
User with "view group details" unable to see users in group
We have an admin who needs to view the users inside of a certain number of groups. We granted them the "view groups" permissions and scaled it to the groups in question. We absolutely cannot grant them edit access. However after signing into the admin console, they can't see the users who are in the group, just the total number of users in each of the groups. I looked in the Admin documentation and it says:
• View groups -- Gives your delegated admin the ability to only "view groups and the users and apps that are assigned to that group in your org."
So it seems to be that this is the only permission they need? Is there another permissions that I need to grant them that I am just missing? I already tried:
• Granting the view users and their details with no conditions
• View application and their details and scaling it to just the application -- this gave them access to view the application but on the assignment page the groups and users were still empty.
Anyone know what I'm missing?
Hi @KaeleyS.95699 (Customer) , Thank you for reaching out to the Okta Community!
As far as I can see from my testing for this use case, you need to create an Admin Role with " View users and their details" and "View groups and their details" .
You also need to create a dedicated resource set, that includes both the "Groups" resource type (which includes the specific groups you want them to see) as well as the "Users" resource type (which includes the specific users you want them to see).
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.