Security Policy Errors

Fix Missing Defender Device Inventory for Security Administrators

Aamir Naveed AkramAamir Naveed Akram Oct 26, 2026 869 views

Question details

Security Administrators and Security Readers are unable to view the device inventory in the Microsoft Defender portal, despite having prior access and correct roles assigned.

How to Fix Missing Defender Device Inventory for Security Administrators
Product
Microsoft Defender
Device & OS
not provided
Scenario
Admin users are attempting to view and manage endpoints within the Microsoft Defender portal but find the device inventory section empty or missing.
Observed behavior
The device inventory is no longer visible to specific users with Security Administrator or Security Reader roles, even though the portal remains connected and the inventory is visible to other users.
Before you start

Ensure you are logged in with Global Administrator credentials or have another administrator verify your account status before making tenant-level system changes.

Solution 1Recommended

Verify Role Assignments and Access Scopes

Check if the affected users have the correct tenant selected and still hold active Microsoft Defender role assignments with the proper scopes.

Access issues in the Defender portal are frequently caused by accidental role modifications, expired licenses, or incorrect tenant selections. Verifying the specific permissions and device groups is the first step.

1
Check the Active Tenant

Navigate to the Microsoft Defender portal and check the active tenant directory at the top right corner to ensure the correct organization is selected.

2
Verify User Roles

Go to Permissions > Roles and confirm the affected individuals are still assigned the Security Administrator or Security Reader roles.

3
Review Device Group Scopes

Ensure that the users have access to the relevant device groups and scopes by checking the assignment rules under Settings > Endpoints > Permissions > Device groups.

4
Audit Recent Changes

Review any recent licensing, role, or permission modifications in the Microsoft 365 Admin Center that might have inadvertently revoked access.

Verify Role Assignments and Access Scopes
Synchronization Delay: If you just reapplied the roles, it may take a few hours for the permissions to fully sync across the Microsoft 365 ecosystem.
Free Microsoft Office alternative

Looking for a Reliable, Free Alternative to Microsoft Office?

While managing Microsoft Defender roles requires tenant administration, handling your daily documents shouldn't be complicated. WPS Office provides a lightweight, highly compatible, and free alternative to Microsoft Office for all your productivity needs.

  1. 1. Download WPS Office: Visit the official WPS Office website and click the free download button.
  2. 2. Install the Software: Run the downloaded installer file and follow the simple on-screen instructions.
  3. 3. Open and Edit: Launch WPS Office to start creating and editing Word, Excel, and PowerPoint documents instantly.
Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Free to use with a familiar, intuitive user interface.Lightweight installation that runs smoothly on any device without slowing it down.Built-in PDF editing, document conversion, and advanced sharing features.
microsoft office alternative - wps office

Frequently Asked Questions

Why did my access to the Defender device inventory suddenly disappear?

This can happen due to recent changes in role assignments, expired user licenses, selecting the wrong tenant directory in the portal, or backend synchronization issues within Microsoft 365.

Can Security Readers normally see the device inventory in Microsoft Defender?

Yes, users assigned the Security Reader role typically have read-only access to view the device inventory and security alerts, provided they have been granted access to the correct device groups.

Where do I manage device groups and scopes for Microsoft Defender?

Device groups and access scopes are managed within the Microsoft Defender portal. You can find these settings by navigating to Settings > Endpoints > Permissions > Device groups.