Licensing and Capacity Models¶
Atlanta, USA
Last updated: 2026-08-04
References
Objective¶
Choose the correct onboarding and cost model before scaling Security Copilot use.
Capacity concepts¶
A SCU (Security Compute Unit) is the capacity measure used for Security Copilot workloads.
| Customer model | Capacity behavior |
|---|---|
| Microsoft 365 E5 (Enterprise 5) and E7 (Enterprise 7) included customer | Default included monthly SCU (Security Compute Unit) capacity |
| Non-Microsoft 365 E5 (Enterprise 5) and E7 (Enterprise 7) customer | Provisioned SCU (Security Compute Unit) baseline plus optional overage |
Provisioned and overage model¶
- Provisioned capacity supports expected steady usage.
- Overage capacity absorbs spikes when provisioned units are exhausted.
- Provisioned units are billed by hourly capacity blocks.
- Overage units are billed by consumed usage.
Planning checklist¶
- Determine whether your tenant is in the inclusion model.
- Estimate expected prompt, promptbook, and agent usage.
- Define monthly budget guardrails and overage strategy.
- Assign ownership for monitoring and capacity adjustments.