Forum Discussion
Feature Request: Manual Invocation Mode for Embedded Security Copilot Experiences to reduce cost !
Hello, I see that Copilot for Security in XDR dashboards , if used in embedded mode (I mean whenever you are opening a case to investigate) you get AUTOMATICALLY a summary of the incident , and you a...
I agree with the point here. RBAC controls who can use Security Copilot, but cost control also needs a separate "run only when I click" option. Until Microsoft adds that tenant-level switch, the safest workaround is to limit Copilot access to the admins who really need it and raise this as product feedback through support or the feedback portal.
I like to stretch it further by having multiple Groups created (A) one with RBAC and another (B) RBAC + Security Copilot ...We could add Application, other Support teams under (A) group able to run Security Pilot but without consuming CU's...Group (B) more of System Admn, DBA, Testers etc...