License & Subscription Issues

Fix Missing Create a Payload Button in Defender Attack Simulation

John WilsonJohn Wilson Oct 26, 2026 868 views

Question details

The user is unable to find the 'Create a payload' button within Microsoft Defender Attack Simulation Training.

How to Fix the Missing 'Create a Payload' Button in Defender Attack Simulation Training
Product
Microsoft Defender for Office 365
Device & OS
not provided
Scenario
Navigating to the Attack Simulation Training page to generate a custom payload for security testing.
Observed behavior
The 'Create a payload' button is missing from the interface due to insufficient subscription entitlements.
Before you start

Ensure you are logged in with Global Administrator or Security Administrator credentials to view and manage subscription licenses in the Microsoft 365 admin center.

Solution 1Recommended

Verify and Assign an Eligible Microsoft 365 License

Custom payload creation requires an advanced Microsoft 365 enterprise subscription. Checking your current licenses and upgrading or starting a trial will restore the button.

Microsoft restricts certain Defender capabilities to premium enterprise plans. The Attack Simulation Training page does not always clearly state this requirement in the UI.

1
Access the Microsoft 365 Admin Center

Navigate to the Microsoft 365 admin portal and log in with your administrator account.

2
Check Your Current Licenses

Go to the 'Billing' section in the left navigation menu and select 'Licenses' to view your organization's active subscriptions.

3
Verify Subscription Eligibility

Ensure your organization has one of the following licenses: Microsoft 365 E5, Office 365 E5, or Microsoft Defender for Office 365 Plan 2. If you do not have these, activate an eligible trial.

4
Assign the License

Select the appropriate E5 or Defender Plan 2 license and assign it to your administrator account and the users managing the attack simulations.

5
Refresh Your Session

Sign out of the Microsoft Defender portal, wait a few minutes, and sign back in to verify that the 'Create a payload' button has successfully appeared.

Verify and Assign an Eligible Microsoft 365 License
Unsupported Subscriptions: The button will remain missing if you are only using Microsoft 365 Business Premium or standalone Enterprise Mobility + Security licenses.
Free Microsoft Office alternative

Looking for a Lightweight and Free Office Suite?

While Microsoft 365 provides advanced enterprise security solutions, it can be costly for basic document needs. If you are looking for a straightforward, cost-effective way to create and edit documents, WPS Office is an excellent free alternative.

  1. 1. Download WPS Office: Visit the official WPS Office website and download the installer for your operating system.
  2. 2. Install the Software: Run the setup file and follow the on-screen instructions to install WPS Office on your computer.
  3. 3. Start Creating Documents: Open WPS Office and instantly create Word documents, Excel spreadsheets, or PowerPoint presentations for free.
Completely free to use for essential office tasks like document editing and spreadsheet managementSeamlessly compatible with Microsoft Office formats, including .docx, .xlsx, and .pptxLightweight design that runs smoothly on both older and modern devicesFamiliar user interface makes transitioning from Microsoft Office effortless
microsoft office alternative - wps office

Frequently Asked Questions

Does Microsoft 365 Business Premium include the custom payload feature?

No. Even after assigning Microsoft 365 Business Premium and other standard security licenses, the 'Create a payload' button will remain missing. You specifically need an E5 or Defender for Office 365 Plan 2 license.

Can I test the custom payload creation without buying an E5 license?

Yes, Microsoft offers eligible trials for Microsoft Defender for Office 365 Plan 2. Activating this trial and assigning it to your account will temporarily enable the 'Create a payload' button during the trial period.

Why is the button still missing after upgrading my license?

License changes may take a short time to propagate across Microsoft services. Sign out of the Microsoft Defender portal, clear your browser cache, and sign back in to ensure the updated permissions are applied to your active session.