Manage usage of security compute units in Copilot for Security
Learn how to monitor and manage the use of security compute units in Copilot for Security.
Monitor security compute units use
Copilot owners can view the usage over time within the Microsoft Copilot for Security product using an in-product usage dashboard.
To view the usage dashboard:
Sign in to Copilot for Security (https://securitycopilot.microsoft.com) and go to the Home menu > Owner settings.
Select Usage monitoring.
View the usage dashboard, which shows how many SCUs are consumed over a period of time by your Microsoft Copilot for Security workloads.
Nearing and crossing security compute unit limit
When the usage in your organization is nearing the limit, you are notified of it when submitting the prompts. To avoid disruption, you can contact the Azure capacity owner or contributor to increase the security compute units or limit the number of prompts.
Experience when nearing security compute unit limit
When an analyst is in the middle of an investigation and the usage is nearing the provisioned capacity limit, a notification is displayed to the analyst in response to a prompt.
These notifications are also shown in Copilot for Security embedded experiences.
The notification informs the analyst to contact the Azure capacity owner or contributor to increase the capacity or limit the number of prompts to avoid disruptions.
The notification allows the analyst to react before they run out of capacity.
Experience when security compute unit limit is exceeded
When the provisioned security compute unit is crossed, the analyst will see an error message stating that due to high usage in the organization Copilot can't respond to requests. Analysts can't submit additional prompts at this time. More capacity would become available in the next hour.
The analyst is asked to contact the Azure capacity owner or contributor to increase the provisioned SCUs.
This view only appears when your organization reaches 100% of capacity.
Update the provisioned security compute units (SCUs)
You can update provisioned security compute units in the Azure portal as well as the Copilot for Security portal.
Azure portal required role: Azure capacity owner or contributor
Copilot for Security portal required role: Azure capacity owner or contributor who are also Copilot for Security owners.
Updating units in the Copilot for Security portal
Sign in to Copilot for Security (https://securitycopilot.microsoft.com) and go Settings.
Select Owner settings.
Under Security compute units, select Change. Update the number of provisioned security compute units (SCUs).
As the number of SCUs are increased or decreased, the estimated monthly cost changes accordingly, assuming the provisioned capacity remains the same 24 hours a day for the whole month.
Handle capacity for features
Public preview and GA capability usage is charged against SCUs while Private preview capability usage is not.