Adding a User to a Group
Adding a User to a Group:
To give a new Okta user access to the organization’s systems, it is necessary to assign an Okta group to a user. The Okta group also provides the administrator access to the user’s account. Without the Okta group the administrator will have read only access.
Group member 'Groups' are typically named according to the following scheme: [Application_Name]:[Role_Within_Okta]:[Region_Abbreviation]:[Country_Name]
For example: Okta:Users:NAO:New_Zealand (This group is added when creating a new user's Okta account.)
To make the Okta user’s account an email account, the user will need to be added to an G_Suite group.
For example: G_Suite:Users:EERU:Poland (This group is added to the users with a Cru verified domain. The G_Suite:User group enables the user to use Google email.)
The administrator can also add the user to a Workplace group. The access is based on the ministry or country’s decision to use Workplace.
For example: Workplace:Users (This group provides access to Workplace, the "Facebook" for the organization.)
To add a user to a group:
- Click on the Directory tab.
- Click on the People sub tab
- Go to the ‘Search’ field.
- Enter the user’s name or email address.
- Click on the name link.
- Click on the “Groups" tab in the User's profile.
- If you have a search box that appears above the list of the User's Groups (as seen in the image), type the name of the Group.
- The two most common groups to enter are G_Suite:Users:[Region]:[Country] and Workplace:Users.
Groups such as Zoom and Office 365 are set up after a license purchase has been made. These groups are set up by User Support and can be requesting by contacting firstname.lastname@example.org.
- When Offboarding a user, the group called, "Okta:Users:Offboarded" will need to be added before removing the other groups required for offboarding a user. Please see "Offboarding a User," for the steps.