Discuss Microsoft SC-500 Exam Topic 2 Question 1

You have multiple Microsoft Security Copilot workspaces.

A user named User1 accesses Security Copilot by using the default workspace.

You create a new workspace named Workspace 1 and assign a capacity to Workspace1.

You plan to route Security Copilot agent traffic to Workspace1.

You need to ensure that User1 can use embedded experiences without errors.

What should you do before switching to Workspace1?

AAdd User1 to Workspace1.

BAssign User1 the Security Operator role in Microsoft Entra.

CDisassociate the capacity from the default workspace.

DCreate a new capacity for Workspace1.

Suggested Answer: A

Security Copilot workspaces have membership and capacity associations. Before routing embedded experience traffic to Workspace1, User1 must be granted access to that workspace. Assigning a generic Security Operator role in Microsoft Entra does not make the user a member of the Security Copilot workspace. Disassociating capacity from the default workspace or creating more capacity does not resolve the user-access error. This domain is tested through precise scope control: tenant, subscription, resource, application, and data-plane authorization are not interchangeable. The correct choice applies the smallest identity or governance control that enforces the stated requirement. Options that only add users, create registrations, or provide broad administrator access fail because they do not directly enforce the requested access behavior. The result is a direct exam-style implementation choice: it changes the required security behavior without relying on unrelated monitoring, manual cleanup, or excessive privilege. Official Microsoft source/topic: SC-500 Study Guide > Security Copilot workspaces; Microsoft Learn > workspace access and capacity.

==============================================================

Get Premium SC-500 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

16 comments · newest first

Aleta 20 hours ago

Yeah, we need to keep the default workspace intact.

Ashanti 6 days ago

Disassociating the capacity seems risky.

Lizette 11 days ago

Right, without access, nothing works.

Aleta 16 days ago

That could be important too, but access first!

Ashanti 22 days ago

But what about assigning the Security Operator role?

Lizette 27 days ago

Agreed! That makes sense for access.

Aleta 1 month ago

I think we should add User1 to Workspace1.

Vernell 1 month ago

Wait, can you really just switch workspaces like that? Sounds too easy!

Cherelle 1 month ago

D) Creating a new capacity? Isn't that overkill?

Joesph 2 months ago

C) Disassociating the capacity? Seems risky.

Carlee 2 months ago

I think B) is more important. Security Operator role is key.

Linwood 2 months ago

A) Add User1 to Workspace1. That's a must!

Shaniqua 2 months ago

Creating a new capacity seems like it might be overkill if we already assigned one to Workspace1, but I guess it depends on the setup.

Desirae 2 months ago

I feel like disassociating the capacity from the default workspace could be a part of the process, but I can't recall if it's necessary.

Salena 2 months ago

I remember a practice question where we had to assign roles in Microsoft Entra, so maybe option B is also important here.

Tom 3 months ago

I think we might need to add User1 to Workspace1, but I'm not entirely sure if that's the only step needed.

Microsoft SC-500 Exam - Topic 2 Question 1 Discussion