Skip to main content
4. Future Consideration

Okta Groups suppor for Creator Studio Workflow Access

Related products:Agent Studio
  • September 9, 2024
  • 5 replies
  • 49 views

Forum|alt.badge.img

We are building out multiple creator studio workflows to support our Sales and Revenue teams, now.  Due to the nature of the data they can access via these workflows - we are looking to limit access to just those groups.  

 

The strongest indicator of team membership in our Okta instance is represented in Okta groups.  If we could get support for that as a way to grant Creator Studio Workflows, that would help remove the manual nature of access today. 

5 replies

neal
  • Employee
  • September 10, 2024

Hi Andrew! Currently the launch options in Creator Studio support using a Moveworks DSL Rule to launch your use case (reference: https://developer.moveworks.com/creator-studio/administration/launch-options/#4-launch-to-users-matching-the-rule).

 

The rules can be written based on data on the Moveworks profile, which can be mapped from the user’s Okta Profile. 

 

So if you can run a job or automation that calls this API (https://developer.okta.com/docs/api/openapi/okta-management/management/tag/Group/#tag/Group/operation/listGroupUsers), and the updates the user’s Okta profiles with an attribute, then Moveworks can key off of that attribute in the launch option.

 


Forum|alt.badge.img
  • Author
  • New Participant
  • September 24, 2024

Hey @neal , 

 

Thanks for sharing that info, and sorry for the delay.   For a few reasons, the team that runs our identity and auth prefers we use Okta groups for items like this.  Is there a way to officially request group support as a feature? 

 

Happy to chat about it more if that will help. 

 

Thank you! 


Ajay Merchia
Forum|alt.badge.img+3
  • Community Manager
  • October 2, 2024

Hey @onlyawave,

The request definitely makes sense and it’s something that we want to support in the platform one day.

Currently, making an external API call while the Copilot is deciding what plugins to select would hurt the ability of the Copilot to do effective reasoning & planning. 

We will continue to think about how to approach this with our engineers, but we don’t have a game plan just yet.


Ajay Merchia
Forum|alt.badge.img+3
  • Community Manager
  • October 2, 2024
1. New4. Future Consideration

Forum|alt.badge.img
  • New Participant
  • November 17, 2024

This is good feature to have. To avoid an external API call, Can Moveworks ingest user’s associated OKTA groups as well during SSO/AD sync? So that these groups will be referred via DSL?