Add least-privilege guidance and metadata

Insert ms.custom metadata flag and add an IMPORTANT note recommending least-privilege roles (and cautioning against routine use of Global Administrator) in the Microsoft Sentinel MCP connector doc. The advisory is placed alongside prerequisites before the "Add a Microsoft Entra application" section to improve security guidance for operators.

Author: poliveria

articles/sentinel/datalake/sentinel-mcp-chatgpt-claude-connector.md

@@ -8,7 +8,8 @@ ms.date: 12/09/2025
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
 ms.subservice: sentinel-platform
-
+ms.custom:
+ - sfi-ga-nochange
 #customer intent: As a security analyst, I want to use a custom Microsoft Sentinel MCP connector in ChatGPT.
 ---
 
@@ -27,6 +28,9 @@ Before configuring a Microsoft Sentinel MCP connector in ChatGPT or Claude, you
 - [Microsoft Sentinel data lake](sentinel-lake-onboarding.md)
 - Tenant-level administrative privileges
 
+> [!IMPORTANT]
+> Use roles with the fewest permissions to help improve security for your organization. Global Administrator is a highly privileged role. Limit its use to emergency scenarios when you can't use an existing role.
+
 ### Add a Microsoft Entra application
 To add a Microsoft Entra application, follow these steps:
 1. Open your tenant's [Microsoft Entra admin center](https://entra.microsoft.com/), go to **App registrations**, and then select **New registration**.