Attempting to assign a token to a user in Active Directory from the "Defender" tab, but the "Assign" button is grayed out.
Possible causes are insufficient permissions and/or lack of user licenses.
Confirm permissions are sufficient to assign token objects to users:
How to delegate Administrative rights in Defender
If permissions is not the issue, confirm that the user license amount has not been met or exceeded:
- Locate the Defender License object in the "Defender" OU. The license object is called "DEFLIC0000000000" and will have a check mark icon.
- Right-click the Defender License object and choose "Properties".
- The "License" tab will display the assigned users. Click on "Verify License Count" to confirm the number of assigned tokens.
- If all licenses have been assigned then it is necessary to either purchase additional licenses or unassign existing tokens.