Issue

When trying to onboard a new Okta log source in Panther the following error occurs:

Source <my-source-name> did not pass configuration check because: Error when trying to access Okta api 'logs': Okta API error (403) {Code:E0000006 Summary:You do not have permission to perform the requested action Id:<action-id>}

Resolution

To resolve this issue ensure that the Okta user who generates the Okta API token has the necessary permissions to perform the actions specified in the API call (Super Administrators, Organization Administrators & Read-only Administrators). 

To create an API token with permissions to query Okta System Logs, please refer to Okta documentation for information on managing Admin roles and their rights.

Cause

This issue occurs when the API token generated lacks the necessary permissions to query Okta System Logs due to user permissions.