Event details
Security Compute Units (SCUs) are the required resource units that power Microsoft Security Copilot, ensuring dependable and consistent performance across both standalone and embedded product experiences within Microsoft Security.
In this session, we’ll demystify SCUs by unpacking:
- What SCUs are and how they function
- The billing models that govern their usage
- Optimization strategies to maximize value
- Best practices for SCU planning and deployment
You’ll also have the opportunity to engage directly with Security Copilot experts to ask your SCU-related questions and gain practical insights.
What is an AMA?
An 'Ask Microsoft Anything' (AMA) session is an opportunity for you to engage directly with Microsoft employees! This AMA will consist of a short presentation followed by taking questions on-camera from the comment section down below! Ask your questions/give your feedback and we will have our awesome Microsoft Subject Matter Experts engaging and responding directly in the video feed. We know this timeslot might not work for everyone, so feel free to ask your questions at any time leading up to the event and the experts will do their best to answer during the live hour. This page will stay up so come back and use it as a resource anytime. We hope you enjoy!
51 Comments
Hello from Tucson, AZ.
- Trevor_Rusher
Community Manager
Hi Hal!
- Dean_GrossSilver Contributor
This Billing in Data Security Investigations (preview) | Microsoft Learn tell us that the Purview Data Security Investigations require a separate set of SCUs that are independent from Security Copilot. It would be good if this was not the case
- fvillalobosOccasional Reader
What is the different with the current Copilot that it is shown currently an almost Microsoft webpages and Security Copilot?
And also the Diff from Copilot License and Security Copilot ?- debacmanikandan-bvCopper Contributor
Gonna make an assumption that the question is about the difference between M365 Copilot vs Security Copilot and give my 2c,
M365 Copilot is for end users, administrators, and non-security chaps where the use case is for productivity, operations, etc. Security Copilot is focused around the 'security' aspect. Even in embedded experiences,
- Security Copilot in Entra ID is mainly for managing CA policies
- Security Copilot in Intune is mainly for managing device security policies and finding gaps
- .. so on
From a pricing model - M365 Copilot follows per user license, and Security Copilot uses compute cost (SCU) model. For example, if you spin a virtual machine in Azure - it doesn't matter how many people are gonna be using or accessing it. It will be charged based on how much compute it takes to run the machine on cloud. Security Copilot follows a similar approach instead of tying it down to a user. Hope that makes sense! :)
- Trevor_Rusher
Community Manager
Hi fvillalobos I'm having a hard time understanding your question to feed it to the speakers. Do you mind rewriting? Thanks!
- SquarePigCopper Contributor
Will there ever be more affordable SCU pricing available to K-12 education customers?
- RynosOccasional Reader
Security Copilot is an impressive product, but for South African customers it’s prohibitively expensive, especially when Promptbooks and Logic Apps are in use, where 12 SCUs can be consumed very quickly. Is there a plan to review or regionalise pricing for markets like South Africa?
- Julien_MénissezCopper Contributor
I often get feedback from client saying SCU too expensive compared to labor cost (Europe), specifically for SOC activities such as defender incident triage. How to help client moving to security copilot ? Thx for the presentation btw !
- DohnCunningham1Copper Contributor
Is this available only as a Standalone or in the Azure environment? Or is there an Admin Center that can be added per licensing in the tenant?
- DohnCunningham1Copper Contributor
Is this available only as a Standalone or in the Azure environment? Or is there an Admin Center that can be added per licensing in the tenant?
- JustinBarker-NasstarCopper Contributor
How do I identify and define "expected people to use these workloads in Copilot". I assume it's not actual end-users, and it's Security Copilot administrators?
- Dean_GrossSilver Contributor
if we have exceeded capacity, will an agent still run?