Microsoft EASM Discovery Group Creation Issues

Question

Microsoft EASM Discovery Group Creation Issues

Frankie Ng 0

Hello,

I've set up a Microsoft EASM instance using the 30-day trial, but I'm encountering issues when trying to create new Discovery Groups.

A Discovery Group was automatically generated when I selected a prebuilt attack surface based on our company name. However, since then, the option to create additional discovery groups has been disabled.

Furthermore, I'm neither to edit or execute the existing discovery group.

I have Owner-level permissions on the subscription and created both resource group and the EASM on the resource.

Does anyone have suggestions on how to resolve this? Thanks

Sridevi Machavarapu 27,315 Reputation points Microsoft External Staff Moderator

2026-03-19T13:52:16.7833333+00:00

Hello Frankie Ng,

Since you have Owner access, permissions shouldn’t be the blocker here.

This usually happens when the initial discovery group (created from the prebuilt attack surface) hasn’t fully completed yet. Until that finishes, the portal can temporarily disable actions like creating new groups or modifying the existing one.

You can check the current status of that discovery group. If it’s still running or pending, give it some time and refresh the portal. It’s also worth trying in an incognito/InPrivate window to rule out any portal glitches.

If the status doesn’t change or the options remain disabled after a while, then it’s likely a service-side issue.

Hope this helps.
Raja Pothuraju 47,165 Reputation points Microsoft External Staff Moderator

2026-04-01T12:21:17.21+00:00

@Frankie Ng, Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

1 answer

Your answer

Sridevi Machavarapu 27,315 Reputation points Microsoft External Staff Moderator

2026-03-19T13:52:16.7833333+00:00

Hello Frankie Ng,

Since you have Owner access, permissions shouldn’t be the blocker here.

This usually happens when the initial discovery group (created from the prebuilt attack surface) hasn’t fully completed yet. Until that finishes, the portal can temporarily disable actions like creating new groups or modifying the existing one.

You can check the current status of that discovery group. If it’s still running or pending, give it some time and refresh the portal. It’s also worth trying in an incognito/InPrivate window to rule out any portal glitches.

If the status doesn’t change or the options remain disabled after a while, then it’s likely a service-side issue.

Hope this helps.
Raja Pothuraju 47,165 Reputation points Microsoft External Staff Moderator

2026-04-01T12:21:17.21+00:00

@Frankie Ng, Just checking in to see if below information was helpful. If you have any further updates on this issue, please feel free to post back.

Answer 1

Hello @Frankie Ng,

According to the documentation, to create a new Discovery Group, you should navigate to the Discovery panel under the Manage section and click on Add Discovery Group. If this option is disabled, it could indicate that the maximum number of Discovery Groups has been reached or that there are restrictions based on your subscription type.

Additionally, ensure that you have correctly followed the steps for creating a Discovery Group, which include naming the group, selecting seeds (known assets), and reviewing the group information before creating it. If you have already created a Discovery Group based on a prebuilt attack surface, the system may limit the creation of additional groups until the first one has completed its discovery run.

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Share via

Microsoft EASM Discovery Group Creation Issues

1 answer

Your answer