---
title: "How to Use Okta's PowerShell Module to Manage Your Okta Org"
description: "The tutorial shows how to use Okta’s official PowerShell module to administer an Okta org, covering authentication, user operations, group management, and broader API automation. It requires a PowerShell terminal, the module installed from the PowerShell Gallery, Chocolatey, or GitHub, plus an Okta Developer Edition account for the setup described. Authentication uses an OIDC Native application with the Device Authorization grant, a client ID, the org base URL, and the okta.users.manage and okta.groups.manage scopes; Invoke-OktaEstablishAccessToken completes authorization. Examples search and retrieve users, create and update profiles, create groups, add users, and inspect memberships with PowerShell pipelines and formatting cmdlets. The demonstrated workflow connects successfully and manages users and groups, while the same techniques are presented as applicable to other Okta API endpoints."
---

# How to Use Okta's PowerShell Module to Manage Your Okta Org

[Okta](https://yomu.fyi/company/okta) · Louie Campagna · May 7, 2024

**Type:** Tutorial

## Summary

The tutorial shows how to use Okta’s official PowerShell module to administer an Okta org, covering authentication, user operations, group management, and broader API automation. It requires a PowerShell terminal, the module installed from the PowerShell Gallery, Chocolatey, or GitHub, plus an Okta Developer Edition account for the setup described. Authentication uses an OIDC Native application with the Device Authorization grant, a client ID, the org base URL, and the okta.users.manage and okta.groups.manage scopes; Invoke-OktaEstablishAccessToken completes authorization. Examples search and retrieve users, create and update profiles, create groups, add users, and inspect memberships with PowerShell pipelines and formatting cmdlets. The demonstrated workflow connects successfully and manages users and groups, while the same techniques are presented as applicable to other Okta API endpoints.

## Context

The setup uses an Okta Developer Edition account, an OIDC Native application configured for Device Authorization, the application client ID, and the Okta org domain. The excerpt demonstrates user and group administration and notes that the module also includes functions for other Okta API areas.

## Approach / What changed

Install the official Okta PowerShell module, create and configure an OIDC Native application, set the PowerShell configuration values and requested scopes, then establish an access token through device authorization. Use module commands to search, retrieve, create, and update users; create groups, add users, and inspect memberships; and apply the same patterns to other Okta API endpoints.

## Takeaways

- The module uses an OIDC Native application and the Device Authorization flow; the tutorial configures the okta.users.manage and okta.groups.manage scopes.
- User workflows include searching with criteria, retrieving profiles, creating users from PSCustomObject data, and updating profile fields through request initialization commands.
- Group workflows create groups, add users by ID, retrieve memberships, and iterate over groups returned by a search with a foreach loop.

## FAQ

### How does the module authorize a PowerShell session?

Create an OIDC Native application with the Device Authorization grant, configure its client ID and the Okta org base URL, then run Invoke-OktaEstablishAccessToken. The command provides a URL and code for browser-based sign-in, after which the access token is set in the PowerShell configuration.

### Which permissions does the tutorial configure?

The example requests okta.users.manage and okta.groups.manage. These scopes support the user and group management operations demonstrated in the tutorial.

### Can the same module manage more than users and groups?

Yes. The tutorial states that the same techniques can be applied to other Okta API endpoints, including the Apps API and Authorization Servers API. It says the module has functions for all aspects of managing an Okta org.

**Tags:** [OAuth 2.0](https://yomu.fyi/topic/oauth-2-0), [Okta](https://yomu.fyi/topic/okta), [OpenID Connect](https://yomu.fyi/topic/openid-connect), [PowerShell](https://yomu.fyi/topic/powershell)

- Source: [Okta](https://developer.okta.com/blog/2024/05/07/okta-powershell-module)
- Source URL: https://developer.okta.com/blog/2024/05/07/okta-powershell-module
- Ingested by Yomu: 2026-09-17T14:06:28.087Z

[Read original post](https://developer.okta.com/blog/2024/05/07/okta-powershell-module)