Assigning the Copilot Owner role so a user can upload files, view the usage dashboard, and share promptbooks with all users

SC-200 By islever Editorial Last updated

Short answer

A Only Copilot Owner can upload files, view the usage dashboard, and share promptbooks with all users; Contributor cannot do the last two.

Question

You have a Microsoft 365 E5 subscription that uses Microsoft Copilot for Security. Copilot for Security has the default settings configured. You need to ensure that a user named User can use Copilot for Security to perform the following tasks: • Upload files. • View the usage dashboard. • Share promptbooks with all users. The solution must follow the principle of least privilege Which role should you assign to User?
  1. Copilot owner Correct Answer
  2. Cloud Application Administrator
  3. Security Administrator
  4. Copilot Contributor

Key Takeaways

Copilot Contributor can create sessions, upload files, and run promptbooks, but cannot view the usage dashboard or publish promptbooks to all users; those two capabilities belong to Copilot Owner, making Owner the minimum role that satisfies the full task list.

A user must upload files, view the Copilot for Security usage dashboard, and share promptbooks with all users under least privilege; only the Copilot Owner role grants all three, because viewing the dashboard and publishing promptbooks tenant-wide exceed Contributor rights.

Common mistake: Choosing Copilot Contributor because it can upload files — it cannot view the usage dashboard nor share promptbooks with all users, so it fails two of the three stated tasks.

Expert Analysis

Why the Answer Is Correct

Microsoft Copilot for Security has four roles. Copilot Contributor can upload files, run promptbooks, and create sessions, but the usage dashboard and the ability to publish/share promptbooks with all users (tenant-wide) require the Copilot Owner role. Because the task lists all three capabilities, Owner is the least-privilege role that actually covers them all.

Why the Other Options Are Wrong

Copilot Contributor (D) lacks dashboard visibility and tenant-wide promptbook sharing, so it cannot complete the task. Cloud Application Administrator (B) and Security Administrator (C) are Microsoft Entra roles that do not grant Copilot for Security session, upload, or dashboard permissions.

Community Comment Notes

The community leans A (80 votes). Rnakaza notes the usage dashboard is not available to the Contributor profile, and Onimole's capability table shows only Owner can publish custom plugins/promptbooks for the tenant and view usage. Swethag37's summary of Contributor capabilities confirms it cannot do all three.

Official Reference

https://learn.microsoft.com/en-us/copilot/security/authentication

This link opens the official vendor documentation in a new tab.

Community Votes

A
80%
D
20%

80% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. Rnakaza 👍 3 Answered A
    View usage dashboard is NOT allowed by contributor profile
  2. Swethag37 👍 2 Answered D
    Explanation: Microsoft Copilot for Security has four roles with different permissions: Copilot Owner: Full access, including managing settings, user permissions, and everything in Copilot for Security. Copilot Contributor: Can upload files, view dashboards, and share promptbooks with all users, but cannot manage user access or system settings. Copilot Reader: Can view dashboards and reports but cannot upload files or share promptbooks. Copilot Custom Role: A role with customized permissions. Since Copilot Contributor allows uploading files, viewing dashboards, and sharing promptbooks, it is the least privileged role that meets all the given requirements.
  3. 71106c6 👍 2 Answered A
    A: Copilot owner https://learn.microsoft.com/en-us/copilot/security/authentication
  4. Onimole 👍 1 Answered A
    Capability Copilot owner Copilot contributor Create sessions Yes Yes Manage personal custom plugins Yes Default No Allow contributors to manage personal custom plugins Yes No Allow contributors to publish custom plugins for the tenant Yes No Change availability of preinstalled plugins for the tenant Yes No Upload files Yes Default Yes Manage upload file usage Yes No Run promptbooks Yes Yes Manage personal promptbooks Yes Yes Share promptbooks with tenant Yes Yes Update data sharing and feedback options Yes No Capacity management Yes* No View usage dashboard Yes No Select language Yes Yes
  5. chiquito 👍 1 Answered A
    Correct Answer A https://learn.microsoft.com/en-us/copilot/security/authentication
Show 1 more comment
  1. rkrau 👍 1 Answered A
    Link is clear on that

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Creating a Microsoft Sentinel bookmark from the Hunting page to support an incident investigation

S-grade

Identifying Affected Entities in Microsoft Defender XDR Incidents

S-grade

Containing a Defender for Identity pass-the-ticket alert by quarantining only the affected device

S-grade

Limiting Microsoft Defender device discovery to specific onboarded devices by creating a device tag first

S-grade

Practice All SC-200 Questions

Access 80 questions with complete answers and detailed explanations.

View Full SC-200 Practice Test →

← Back to SC-200 Study Guide