Merge pull request #314450 from poliveria/poliveria-mcp-prereq-04082026

Add SCU role requirements for entity analyzer

Author: prmerger-automator[bot]

articles/sentinel/datalake/sentinel-mcp-data-exploration-tool.md

@@ -4,7 +4,7 @@ titleSuffix: Microsoft Security
 description: Learn about the different tools available in the Data exploration collection in Microsoft Sentinel 
 author: poliveria
 ms.topic: how-to
-ms.date: 04/02/2026
+ms.date: 04/14/2026
 ms.author: pauloliveria
 ms.service: microsoft-sentinel
 ms.subservice: sentinel-platform
@@ -29,6 +29,12 @@ To access the data exploration tool collection, you need the following prerequis
     - [Microsoft Foundry](sentinel-mcp-use-tool-azure-ai-foundry.md#add-a-microsoft-sentinel-tool-collection)
     - [Visual Studio Code](sentinel-mcp-use-tool-visual-studio-code.md) 
 
+> [!IMPORTANT]
+> Access to Sentinel MCP tools is supported for users, managed identities, or service principals that are assigned with ***at least*** any of the following roles:
+> - Security Administrator
+> - Security Operator
+> - Security Reader
+
 ## Add the data exploration collection
 
 To add the data exploration collection, first set up Microsoft Sentinel's unified MCP server interface. Follow the step-by-step instructions for compatible [AI-powered code editors and agent-building platforms](sentinel-mcp-get-started.md#add-microsoft-sentinels-collection-of-mcp-tools).
@@ -78,6 +84,14 @@ For example, `analyze_user_entity` reasons over the user's authentication patter
 
 Entity analysis tools might require a few minutes to generate results, so there are tools to start analysis for each entity and another one that polls for the analysis results.
 
+> [!IMPORTANT]
+> To use the entity analyzer tool, you also need the following roles:
+> - **Security Copilot Contributor** – This role is required to use the tool, which consumes Security Compute Units (SCUs) to deliver reasoned entity risk analysis.
+> - **Security Copilot Owner** (optional) – This role is only required to view and monitor SCU usage.
+> 
+> For more information, see [Understand authentication in Microsoft Security Copilot](/copilot/security/authentication).  
+
+
 #### Start analysis (`analyze_user_entity` and `analyze_url_entity`)
 
 | Parameters | Required? | Description |