
NiviM.71991 (Customer) asked a question.
I know that group rules cannot assign users to groups that have admin roles assigned to them or are admin groups.
https://help.okta.com/oie/en-us/content/topics/users-groups-profiles/usgp-about-group-rules.htm
But I recently came across an issue where I got an error from the API - Group Rules Cannot Assign Users to Read-Only Groups. I'm not sure where this is coming from or how to recreate this issue.
What is a read-only group? I've never encountered anything like this before. Any suggestion where to look or what to check for?

Hello @NiviM.71991 (Customer) Thank you for posting on our Community page!
Read only groups are any groups that are brought into Okta from an external Source, ex: AD groups, MS Groups, etc.
External groups are groups that no administrator can manage, as they are managed by the external Source.
It could be that in your API call you have the ID of such a group, and thus receiving the error.
Thank you for reaching out to our Community and have a great day!
--
Help others in the community by liking or hitting Select as Best if this response helped you.