Embedded Experiences Across Products¶
Atlanta, USA
Last updated: 2026-08-04
References
Objective¶
Deploy Security Copilot where analysts already work, while preserving consistent governance and usage controls across embedded experiences.
Embedded integration map¶
| Product area | Example value |
|---|---|
| Microsoft Defender XDR (Extended Detection and Response) | Incident and threat triage acceleration |
| Microsoft Sentinel | Incident summarization and investigation support |
| Microsoft Entra | Identity risk and lifecycle investigation workflows |
| Microsoft Intune | Endpoint policy and troubleshooting support |
| Microsoft Purview | Data security and compliance investigation support |
Deployment guidance¶
- Prioritize embedded experiences in highest-volume analyst workflows.
- Align plugin and role controls before enabling broader access.
- Validate that sidecar behavior and usage expectations are understood.
- Document product-specific runbooks for each embedded flow.
Operational caution¶
Restricting required plugins can degrade embedded experiences even when users have access to the parent security product.