Security Policy Errors

How to Fix Missing Vulnerability Management in Microsoft Defender

Olivia Miller Sep 28, 2026 870 views

Question details

Users need to know which permissions are required to access and view the Vulnerability Management section in Microsoft Defender.

How to Assign Required Permissions for Microsoft Defender Vulnerability Management

Product: Microsoft Defender
Device & OS: not provided
Scenario: Attempting to access and manage vulnerability data in the Microsoft Defender portal.
Observed behavior: The Vulnerability Management section is missing or not displayed for users assigned only the Security Reader or Security Operator roles.

Before you start

Ensure you have Global Administrator privileges to modify user roles and verify that your organization holds an active Defender Vulnerability Management subscription.

Solution 1Recommended

Assign the Security Administrator or Global Administrator Role

Upgrade the user's role to Security Administrator to grant the necessary access for viewing the Vulnerability Management features.

The Security Reader and Security Operator roles do not have sufficient permissions to view or manage vulnerability features. You must assign a higher-level role while adhering to the principle of least privilege.

Open Permissions and Roles

Log in to the Microsoft Defender portal, navigate to the bottom left corner, and click on 'Settings'. From the Settings menu, select 'Permissions and roles'.

Select the Appropriate Role

Locate and select the 'Security Administrator' role. This is typically the least-privileged role that provides full access to Vulnerability Management without granting unnecessary global access.

Assign the Role to the User

Assign the selected role to the target user account and save your changes.

Refresh User Session

Instruct the user to sign completely out of the Microsoft Defender portal and sign back in to ensure the new permissions are applied.

Verify Subscription

If the section still does not appear, verify your tenant's billing section to confirm that the organization's subscription includes Microsoft Defender Vulnerability Management.

Assign the Security Administrator or Global Administrator Role

Propagation Time: Role changes in Microsoft 365 and Defender can occasionally take up to a few hours to fully propagate across all admin centers.

Free Microsoft Office alternative

Document Your Security Policies with WPS Office

While resolving Microsoft Defender access issues, you might need a reliable productivity suite to document security guidelines, audit reports, and compliance policies. WPS Office is a free, lightweight, and user-friendly alternative that meets all your daily documentation needs.

1. Download WPS Office: Visit the official WPS website to download and install the free WPS Office suite on your computer.
2. Create Security Documents: Open WPS Writer to draft your organization's vulnerability management protocols and role assignment guidelines.
3. Save and Share: Save your document in .docx format or export it as a PDF to distribute securely to your IT and security teams.

Seamless compatibility with Microsoft Office formats (.docx, .xlsx, .pptx) for sharing security audits.Free to use with a lightweight installation that won't slow down your device.Familiar tabbed user interface, allowing a smooth transition for new users.Built-in PDF editing tools for securing and finalizing official policy documents.

microsoft office alternative - wps office

Frequently Asked Questions

Why can't a Security Reader see the Vulnerability Management section?

The Security Reader and Security Operator roles are designed for monitoring and basic operational tasks. They do not have the necessary privileges required to access the more advanced Vulnerability Management dashboard. The Security Administrator role is required at a minimum.

Does Defender Vulnerability Management require a separate license?

Yes, depending on your current Microsoft 365 subscription tier, Defender Vulnerability Management may require a specific add-on license or an upgrade to plans like Microsoft Defender for Endpoint Plan 2.

I assigned the correct role, but the user still can't see the section. What should I do?

First, ensure the user has completely signed out of the portal, cleared their browser cache, and signed back in. If it is still missing, verify that your organization has the correct vulnerability management licenses applied to the tenant.

Microsoft Office Security Issues