Something went wrong MDI instance cannot be created

Question

How can I fix the below issue?

The MDI instance on my existing tenant was not completed before by my predecessor, hence I deleted the three builtin groups, however, I am still stuck at the above issue, despite the gMSA has been created and the agent installed on my OnPremise AD DS.

Answer 1

@EnterpriseArchitect Apologies for the delayed response, just wanted to check does the issue still persists?

Were you able to delete the MDI groups and re-create the instance?

Check the required permissions/pre-reqs required to create MDI instance

https://learn.microsoft.com/en-us/defender-for-identity/role-groups#required-permissions-defender-for-identity-in-microsoft-defender-xdr

https://learn.microsoft.com/en-us/defender-for-identity/deploy/deploy-defender-identity

Let me know if you have any questions, feel free to post back.