diff --git a/Src/Dlhis.Basic/Device/Controllers/DeviceGroupsController.cs b/Src/Dlhis.Basic/Device/Controllers/DeviceGroupsController.cs
index 4ab2c652..7da2fc1d 100644
--- a/Src/Dlhis.Basic/Device/Controllers/DeviceGroupsController.cs
+++ b/Src/Dlhis.Basic/Device/Controllers/DeviceGroupsController.cs
@@ -68,8 +68,8 @@ public class DeviceGroupsController : ControllerBase
     /// <param name="request"></param>
     /// <returns></returns>
     [HttpPost("assign")]
-    [IgnoreTenant]
     [Transactional]
+    [DataPermission]
     public async Task AssignDevicesAsync(DeviceAssignRequest request)
     {
         await _deviceGroupService.AssignDevicesAsync(request);