What action is NOT permitted for an Okta mastered user?

An Okta mastered user typically refers to a user whose account and profile data are managed by an external identity source, like Active Directory, rather than being fully maintained within Okta itself. In this context, the system limits certain actions to ensure data integrity and sync with the external source.

Deleting a user account is not permitted for an Okta mastered user because these accounts are tied to an external identity management system. Changes made within Okta may not be reflected in the external system, potentially leading to inconsistencies. Therefore, the ability to delete such an account is restricted to maintain synchronization and coherence between the external identity provider and the Okta system.

On the other hand, actions like activating or suspending a user account or updating profile information may be allowed as they can generally be managed within the confines of Okta and may not disrupt the overall synchronization with the external identity provider.