Okta Administrative Privilege Grant

Lacey Cochrane@NullVectorX

•updated Aug 24, 2026•13•0•10

Detects administrative privilege grants to users or groups within Okta, including standard privilege grants and custom admin role bindings. This activity is often associated with account takeovers where an attacker attempts to escalate privileges or configure rogue IdP federation to maintain persistent access.