> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Okta_ResourceSetContains

> Membership of objects within an Okta resource set

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Source: [Okta\_ResourceSet](/opengraph/extensions/okta/nodes/okta_resourceset)
* Destination: [Okta\_User](/opengraph/extensions/okta/nodes/okta_user), [Okta\_Group](/opengraph/extensions/okta/nodes/okta_group), [Okta\_Application](/opengraph/extensions/okta/nodes/okta_application), [Okta\_ApiServiceIntegration](/opengraph/extensions/okta/nodes/okta_apiserviceintegration), [Okta\_Device](/opengraph/extensions/okta/nodes/okta_device), [Okta\_AuthorizationServer](/opengraph/extensions/okta/nodes/okta_authorizationserver), [Okta\_IdentityProvider](/opengraph/extensions/okta/nodes/okta_identityprovider), [Okta\_Policy](/opengraph/extensions/okta/nodes/okta_policy)
* Traversable: ✅

## General Information

The traversable Okta\_ResourceSetContains edges represent the membership relationships between resource sets and their member entities in Okta:

```mermaid theme={null}
graph LR
    rs1("Okta_ResourceSet Sales Department Resources")
    u1("Okta_User john\@contoso.com")
    u2("Okta_User alice\@contoso.com")
    g1("Okta_Group Sales Team")
    a1("Okta_Application GitHub")
    d1("Okta_Device John's MacBook")
    rs1 -- Okta_ResourceSetContains --> u1
    rs1 -- Okta_ResourceSetContains --> g1
    rs1 -- Okta_ResourceSetContains --> a1
    rs1 -- Okta_ResourceSetContains --> d1
    u2 -- Okta_MemberOf --> g1
    rs1 -- Okta_ResourceSetContains --> u2
```

Note that users can also be members of resource sets indirectly through group memberships. The intermediate group will not appear in the graph, but the user membership will be resolved by the collector.