Forum Discussion

rob_wood_8894's avatar
rob_wood_8894
Brass Contributor
Aug 09, 2022

Device Groups not working as expected

Hello, Added tags to some of our onboarded devices and created a device group to collect them together, all good.  Created a role in endpoints\Roles and assigned it to the device group and an AAD gr...
rob_wood_8894's avatar
rob_wood_8894
Brass Contributor
Aug 23, 2022
OK, I now have the answer!
Every Device group you create has to have an assigned AAD group (for RBAC) including the Unassigned DG
Every AAD group has to be assigned to an MDE created Role
The AAD group can have zero members, e.g. when used with the Unassigned DG so no-one apart from Admins can see the inventory.
  • tgo21's avatar
    tgo21
    Copper Contributor
    Oct 11, 2023

    Fhaddad81 thank you so much! Ensuring the user group column is not blank solved my issue. I've been working with Microsoft on this for over 3 months. Thank you for solving our problem.

    Have a great day!

     

    Glenn

  • Fhaddad81's avatar
    Fhaddad81
    Copper Contributor
    Oct 11, 2023

    tgo21 

     

    Hello,

     

    Every device group should be assigned with users group (AZ group) even the default one (ungrouped devices) so User group column on devices group should not be empty .

     

    Best Regards

    Fadi

     

  • tgo21's avatar
    tgo21
    Copper Contributor
    Oct 11, 2023

    Fhaddad81 

    Good morning!

     

    I came across this thread this morning. Thank you for raising this up to Microsoft. I am experiencing the exact same issue you described above and was hoping you could detail what you did to remediate the access issue. Seems my user is still seeing the entire inventory, so it appears one a step or two away from the resolution.

     

    Thanks in advance for your time and assistance.