Error create instance Defender for identity

[viniciuscarmo]

Hello guys, I need help.

I am create a intance the Defender for identity but receive mensage: the instance was not created because there is already a security group with the same name as the azure active directory

Any tips on how to solve ?

Thanks

[#2]

Delete the existing 3 security groups from aad and try again.

[#3]

I know this is old but just in case anyone has the same problem:

There are 3 default security groups called
Azure ATP {instance name} Administrator
Azure ATP {instance name} Users
Azure ATP {instance name} Viewers

https://learn.microsoft.com/en-us/defender-for-identity/role-groups

These may be empty but need to be deleted for defender for identity to proceed.

[#4]

that is still relevant David (thanks)

[#5]

I'm curious where the groups came from and why some tenants have this issue and others don't,

[#6]

@NetworkCompany Not sure where they came from, I was assuming it was an Azure service template or something, I know I didn't previously create them manually. We are synchronising our accounts from on-prem AD and those accounts were Azure Native.

[#7]

@David Fox 

Microsoft's error messages should include the details like the name(s) of the groups that need to be deleted so people have clear (not nebulous) direction. Thanks for the clarification.

[#8]

Thank you, that helped me out.

[#9]

Several users have reported deleting the below three groups to resolve the error message. I had the same issue with my tenant; I fixed the problem by renaming the three groups instead of deleting and recreating them.

Azure ATP {instance name} Administrator
Azure ATP {instance name} Users
Azure ATP {instance name} Viewers