Forum Discussion
Defender Device Groups
Hello everyone,
I need some help creating a device group in Defender. I can't find anything related to Groups inside Microsoft Security. I'd read that it's possible to create one inside the Permissions tab, but I can't figure out how.
Someone can explain what's the process?
2 Replies
Hi Alex,
Device groups live under Settings, not directly under Permissions.
Go to Settings > Endpoints > Permissions section > Device groups.
or Direct link: https://security.microsoft.com/securitysettings/endpoints/machine_groupsFrom there, select Add device group, then:
- On the General page, set a name, remediation level, and optional description
- On the Devices page, set the matching rule (device name, domain, tags, or OS platform) that determines which devices land in the group
One thing worth knowing, creating device groups requires the Security Administrator role, so if the option isn't visible or feels greyed out, check your assigned role first before assuming it's a navigation issue.
I couldn't find the path you mentioned, and when I tried the direct link, I was redirected to the home page.
Is there any licensing restriction? I have the Security Administrator role.
