Microsoft Copilot for Security (Preview)

  • Reference

A generative AI-powered assistant for daily operations in security and IT. AI-generated content may contain mistakes. Check responses for accuracy.

This connector is available in the following products and regions:

Service Class Regions
Logic Apps Standard All Logic Apps regions except the following:
     -   Azure Government regions
     -   Azure China regions
     -   US Department of Defense (DoD)
Contact
Name Microsoft
URL Microsoft LogicApps Support
Connector Metadata
Publisher Microsoft

Microsoft Copilot for Security

Pre-Requisites

To make the most of this new Logic App connector, there are a few prerequisites to be aware of

  • Tenant deployment requirements: Your Logic App must be deployed within a tenant that is actively participating in the Security Copilot Early Access Program

  • User authentication and role access: Users looking to authenticate with the Logic App connector must hold specific access roles. For a deeper understanding of these roles and how they function within the framework of Security Copilot, we recommend exploring Understand authentication in Microsoft Security Copilot | Microsoft Learn

  • Data access for enhanced security interaction: It's important that the authenticated user can access data from various remote security products. This encompasses tasks like reading Defender incident reports and gathering multi-factor authentication (MFA) details, among others.

For access to Microsoft Security Copilot Early Access Program, reference the following onboarding documentation

Authentication

The Microsoft Security Copilot connector can operate on behalf of a Entra (AAD) user identity that has the necessary permissions to call Security Copilot.

Available resources

Security Copilot Connector

Azure Logic Apps

Creating a connection

The connector supports the following authentication types:
Default Parameters for creating connection. All regions Not shareable

Default

Applicable: All regions

Parameters for creating connection.

This is not shareable connection. If the power app is shared with another user, another user will be prompted to create new connection explicitly.

Throttling Limits

Name Calls Renewal Period
API calls per connection 600 60 seconds

Actions

Submit a Copilot for Security prompt

Submit a security question or task to Copilot for Security and get a response. AI-generated content may contain mistakes. Check responses for accuracy.

Submit a Copilot for Security prompt

Operation ID:
ProcessPrompt

Submit a security question or task to Copilot for Security and get a response. AI-generated content may contain mistakes. Check responses for accuracy.

Parameters

Name Key Required Type Description
Prompt Content
 PromptContent True string

Prompt to be evaluated by security copilot
SessionId
 SessionId string

The ID for an existing Copilot session
Plugins
 Skillsets array of string

Plugins to enable for this Copilot session
Direct Skill Name
 SkillName string

Skill to invoke
Direct Skill Inputs
 SkillInputs object

Skill required inputs

Returns

Evaluation result object

Body
EvaluationResult

Definitions

EvaluationResult

Evaluation result object

Name Path Type Description
sessionId
 sessionId string
skillName
 skillName string
promptContent
 promptContent string
evaluationResultType
 evaluationResultType string
EvaluationResultContent
 EvaluationResultContent string
nextPromptSuggestions
 nextPromptSuggestions array of string