Microsoft Security Operations Analyst Associate SC-200 Practice Question

The Security Copilot Contributor role is designed for users who need to interact with Security Copilot at a content level. Members of this role can run prompts, create new prompts, and manage promptbooks, which satisfies the requirement for the Tier 2 analysts. They do not have permissions to manage tenant-wide or service-wide settings such as plugin configuration, capacity, or billing, so the environment remains protected from administrative changes.

The Security Copilot Administrator role would be excessive because it allows full management of Security Copilot settings, including plugins and capacity. The Security Copilot Reader role is insufficient because it only allows viewing existing content and responses without the ability to author or edit promptbooks. The generic Security Administrator role does not grant the specific Security Copilot permissions required for promptbook creation and may still allow broader security configuration changes elsewhere in Microsoft 365.