Microsoft Security Operations Analyst Associate SC-200 Practice Question

Microsoft Security Copilot relies on Microsoft Entra ID role-based access control (RBAC). Users need the Security Copilot Contributor role to run prompts that use the plugins made available to the tenant (for example, the Microsoft Sentinel and Microsoft Defender XDR plugins). The Contributor role lets them read from all configured data sources and execute prompts, but it does not grant permission to add or remove plugins or to change tenant-wide settings-those abilities are reserved for the Security Copilot Administrator role. The Viewer role permits only read-only access to published promptbook results and therefore would not let analysts execute their own prompts. Assigning Security Administrator or Defender RBAC roles does not affect what a user can do in Security Copilot.