Forum Discussion
Disabling Security Copilot Embedded Experience in Microsoft Defender XDR
We are currently trialing Microsoft Security Copilot for specific use cases within our organization. However, due to our RBAC setup, many of our security administrators have default access to the embedded Copilot experience in Microsoft Defender XDR. This is consuming SCUs unnecessarily.
Is it possible to disable or limit the embedded Security Copilot experience in XDR for certain users or roles while still maintaining access to other XDR features? We would like to optimize SCU usage while ensuring that only authorized personnel can utilize Copilot's capabilities.
Hi, currently, it's not possible to disable or selectively limit the embedded Security Copilot experience in Microsoft Defender XDR for specific roles or users without affecting access to other features. To optimize SCU consumption, you can review RBAC assignments, although this may restrict other functionalities. If needed, consider providing feedback to Microsoft for future improvements.
