Unable to assign Defender tokens (4347548)

Attempting to assign a token to a user in Active Directory from the "Defender" tab, but the "Assign" button is grayed out. 

Possible causes are insufficient permissions and/or lack of user licenses.

Confirm permissions are sufficient to assign token objects to users:

How to delegate Administrative rights in Defender

If permissions is not the issue, confirm that  the user license amount has not been met or exceeded:

- Locate the Defender License object in the "Defender" OU.  The license object is called "DEFLIC0000000000" and will have a check mark icon.

- Right-click the Defender License object and choose "Properties".

- The "License" tab will display the assigned users.  Click on "Verify License Count" to confirm the number of assigned tokens.

- If all licenses have been assigned then it is necessary to either purchase additional licenses or unassign existing tokens.