Forum Discussion
Feature Request: Manual Invocation Mode for Embedded Security Copilot Experiences to reduce cost !
Hello, I see that Copilot for Security in XDR dashboards , if used in embedded mode (I mean whenever you are opening a case to investigate) you get AUTOMATICALLY a summary of the incident , and you a...
I agree with the point here. RBAC controls who can use Security Copilot, but cost control also needs a separate "run only when I click" option. Until Microsoft adds that tenant-level switch, the safest workaround is to limit Copilot access to the admins who really need it and raise this as product feedback through support or the feedback portal.