Okta Groups and Members mismatch of Numbers

Thank you for posting on our Community page!

You are asking why a user shows as added to an Okta group in the System Log but does not appear in the group's member list in the Admin Console.

Several causes can produce this mismatch, and the fastest check is to confirm membership from the user's record and the Groups API before assuming a display problem.

Solution: Work through these checks in order.

1. Check the user's record. Go to Directory → People, open the user, and select the Groups tab. If the group appears there, membership exists and the issue is in the group view or your admin permissions.
2. Check your admin permissions. If you are a delegated admin, your role must include both "View groups and their details" and "View users and their details," and your resource set must include both the specific group and the specific users. Without the Users resource type in the resource set, members can fail to display even though the group is visible.
3. Check for a group rule that removed the user. Go to Directory → Groups, open the group, and review its Rules. Group rules re-evaluate attributes and can remove a user shortly after a manual or rule-based add. Check the System Log for a subsequent group membership removal event for the same user.
4. Confirm with the Groups API. Send a GET request to /api/v1/groups/{groupId}/users. This returns the members Okta stores for the group. If the user appears in the API response but not in the Admin Console, open a Support case, because the display is inconsistent with the stored data.
5. Open a Support case if the user is still missing. Include the System Log event UUID, the timestamps, the actor who performed the add, the group ID, and the user ID. Support can verify membership changes against the backend records.

Thank you for reaching out to our Community and have a great day!

--

Help others in the community by liking or hitting Select as Best if this response helped you.

In Directory - People - Groups tab: it shows that the user is in the group. If you open the group, the user is not listed. The system logs shows that user was added. This is happening on multiple groups. I have permissions to all the groups and no rule is setup to remove the user.

Its happening for all users and groups - the UI is playing up and showing inconsistencies.

Anyone seen this lately?