Detection rules › By event

Okta-group

Event	Rules
group.privilege.grant	5

group.privilege.grant

5 detection rules reference this event. View event page.

Sigma (1)

Okta Admin Role Assigned to an User or Group severity medium T1098, T1098.003

Elastic (2)

Administrator Privileges Assigned to an Okta Group severity medium T1098, T1098.003
Okta User Assigned Administrator Role severity medium T1098, T1098.003

Kusto (1)

High-Risk Admin Activity severity medium T1078, T1078.004, T1098

Panther (1)

Okta Group Admin Role Assigned severity high