Add SCU role requirements for entity analyzer

Update ms.date and add documentation about Security Compute Units (SCUs) and required roles for the entity analyzer tool. The changes introduce prerequisites noting that Security Reader and Security Copilot Contributor are needed to run the analyzer and Security Copilot Owner is required to view SCU usage, and add an IMPORTANT callout explaining SCU usage and role requirements.

Author: poliveria

articles/sentinel/datalake/sentinel-mcp-data-exploration-tool.md

@@ -4,7 +4,7 @@ titleSuffix: Microsoft Security
 description: Learn about the different tools available in the Data exploration collection in Microsoft Sentinel 
 author: poliveria
 ms.topic: how-to
-ms.date: 04/02/2026
+ms.date: 04/08/2026
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
 ms.subservice: sentinel-platform
@@ -29,6 +29,10 @@ To access the data exploration tool collection, you need the following prerequis
     - [Microsoft Foundry](sentinel-mcp-use-tool-azure-ai-foundry.md#add-a-microsoft-sentinel-tool-collection)
     - [Visual Studio Code](sentinel-mcp-use-tool-visual-studio-code.md) 
 
+To use the [entity analyzer tool](#entity-analyzer), you also need the following roles:
+- **Security Reader** and **Security Copilot Contributor** - To use the tool, which uses [Security Compute Units (SCUs)](/copilot/security/manage-usage) to deliver the reasoned entity risk analysis. 
+- **Security Copilot Owner** - To view SCU usage. For more information, see [Understand authentication in Microsoft Security Copilot](/copilot/security/authentication).  
+
 ## Add the data exploration collection
 
 To add the data exploration collection, first set up Microsoft Sentinel's unified MCP server interface. Follow the step-by-step instructions for compatible [AI-powered code editors and agent-building platforms](sentinel-mcp-get-started.md#add-microsoft-sentinels-collection-of-mcp-tools).
@@ -78,6 +82,11 @@ For example, `analyze_user_entity` reasons over the user's authentication patter
 
 Entity analysis tools might require a few minutes to generate results, so there are tools to start analysis for each entity and another one that polls for the analysis results.
 
+> [!IMPORTANT]
+> This tool uses [Security Compute Units (SCUs)](/copilot/security/manage-usage) to deliver the reasoned entity risk analysis, so you need to have the **Security Reader** and **Security Copilot Contributor** roles to use it and generate results.
+> 
+> To view SCU usage, you also need to have the **Security Copilot Owner** role. For more information, see [Understand authentication in Microsoft Security Copilot](/copilot/security/authentication).  
+
 #### Start analysis (`analyze_user_entity` and `analyze_url_entity`)
 
 | Parameters | Required? | Description |