Staged Service Accounts

The Staged Service Accounts API provides admin operations to set up SaaS app accounts and Universal Directory accounts for Okta Privileged Access teams

List all staged service accounts from Okta Universal Directory
Admin roles:
  • resource_admin

Lists all SaaS and Okta service accounts from Okta Universal Directory that have not been assigned to a project or resource group

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

query Parameters
managed
boolean

If true, only return staged accounts that support password rotation. If false, only return staged accounts that do not support password rotation.

app_instance_id
Array of strings

Only return staged accounts with the specified app instance IDs

Responses
200

OK

get/v1/teams/{team_name}/resource_assignment/universal_directory/accounts
Request samples
Response samples
application/json
{
  • "list": []
}

Assign a SaaS or Okta service account to a resource group and project
Admin roles:
  • resource_admin

Assigns a SaaS or Okta service account to a resource group and project. If the account can be actively managed, rotates the password for the account immediately.

SecuritybearerAuth
Request
path Parameters
team_name
required
string

The name of your team

staged_service_account_id
required
string

The UUID of a STAGED service account

project_id
required
string

The UUID of a project

Responses
204

No Content

put/v1/teams/{team_name}/resource_assignment/universal_directory/accounts/{staged_service_account_id}/assign/{project_id}
Request samples