Read-only administrators
Read-only admins have view access to most data in the Admin Console. Like report admins, read-only admins are unable to edit data. The only settings that read-only admins can change are their own notifications and API token settings.
Read-only admins can view the following:
- Users
- Groups
- Apps and app instances
- Reports
- Okta settings
- System Log
- Authorization server scope
- Device Trust enablement settings
- Mobile policies
- Wifi policies
- Device details
- Sign-on policies
- Inline hooks
For a complete view of all of the permissions that are granted and excluded from this role, see Standard administrator roles and permissions.