Roles and Access Model¶
Atlanta, USA
Last updated: 2026-08-04
References
Objective¶
Define role ownership and least-privilege access boundaries before broad adoption.
Security Copilot role model¶
| Role | Typical responsibility |
|---|---|
| Owner | Capacity, plugin controls, environment-level governance |
| Contributor | Operational use, content execution, and approved configuration tasks |
| Analyst | Daily investigations, prompts, and workflow execution |
Access governance priorities¶
- Ensure at least two owners for continuity.
- Separate capacity administration from day-to-day analysis roles.
- Document emergency escalation roles for service-impacting issues.
- Align support-case permissions with operational responsibilities.
Required controls¶
- Periodic role review.
- Privileged action logging.
- Plugin publishing restrictions.
- Support escalation runbook ownership.