Permission constraints
Group management restrictions: If a group contains super admins, a non-super admin user will not be able to add members to that group. This restriction ensures that only users with the highest level of access can modify groups containing super admins.
Admin modification limitations: A non-super admin user’s API token will not be permitted to modify any admin accounts with higher access levels. This includes actions such as adding these admins to a group, editing their properties, or any other modifications. This restriction is in place to maintain the security and integrity of high-level administrative roles.
Reset password limitations
The Reset password skill needs to be configured by the admin.
The action works only for non-super admins.
The action can be performed only for users who have their Okta account status as Active or Password Expired AND have configured their self-service mechanism in their Okta profile. If the user has been invited but has not yet joined the Okta account or their account status is anything other than Active/Password expired (see the full list of Okta account statuses here), they cannot reset their password.