AB-900: Copilot and Agent Administration Fundamentals Course

discover how Microsoft 365 Copilot, embedded across Word, Excel, PowerPoint, Outlook, and Teams, uses Microsoft Graph and retrieval augmented generation to deliver contextual insights within your tenant.

Explore Microsoft 365 Copilot architecture from query to context, plugins (knowledge and action) with Bing web search and autonomous flows, using Azure OpenAI foundation models for privacy and GDPR compliance.

Explore Copilot licensing options, comparing free Copilot web with pay-as-you-go and monthly licensing for Microsoft 365 Copilot, highlighting Microsoft Graph grounding, commercial data protection, and app integration.

Navigate the Microsoft 365 Admin Center to control Copilot adoption and billing policies. Manage licenses by user or group and configure pay-as-you-go policies with budgeting alerts.

Explore the copilot work and web experiences in m365, chat about private documents in OneDrive or SharePoint, and learn to create simple agents with copilot studio.

Learn prompt engineering to craft precise, context-rich prompts for generative AI apps like Copilot, ChatGPT, and Gemini, using goal, context, expectations, and source.

Explore the researcher agent in Microsoft Copilot for the 365 experience, and learn how it analyzes your identity, Purview policies, and email data to deliver detailed compliance insights.

This hands-on lab shows the copilot analysts agent performing deep data analysis on a sample sales dataset using a python code interpreter to generate charts and key insights.

Learn to draft a Word document with Copilot in Word, creating a generative AI intern job opening and customizing details like stipend, company name, and application instructions.

Explore Copilot in Word’s tabular visualization by turning a spaghetti and meatballs ingredients list into a two-column ingredients and amount table. Create a directions table in this hands-on lab.

Explore Copilot in Excel to analyze a sales data sheet by formatting as a table, generating data insights, pivot charts, and identifying outliers and regions east, central, and west.

Draft an end-to-end PowerPoint on fruit juices using Copilot, and learn to tailor templates with designer and generate content like nutritional benefits and types of fruit juices.

Generate a full PowerPoint, with slides and speaker notes, from a Word document using Copilot for 365 and Microsoft Graph grounding, covering boiler vs furnace systems for commercial buildings.

Explore Copilot in Outlook to summarize emails, draft replies, and coach emails to improve tone and clarity, including drafting from an idea and sending professional responses.

Explore how Copilot in Teams summarizes chat threads, extracting key takeaways and citations from a multi-message proposal, including budget adjustments and a client Zoom request.

Learn to schedule Copilot prompts in Microsoft 365 to run at a set time and email a daily meeting summary. Use the prompt library to save, view, and share prompts.

Explore how AI agents function as compound systems with planning and tools, guided by an orchestrator, and how Copilot Studio and Azure AI Foundry enable domain-specific agents.

Explore Copilot Studio licensing: pay-as-you-go or a 25,000-credit monthly commitment, with a free work account trial. Track credits for answers and actions; start with a trial, then pilot.

Explore AI security and governance from a solution architect and CTO viewpoint, applying defense in depth with Microsoft Purview, Microsoft Defender, and Microsoft Sentinel for data and identity protection.

Learn how Microsoft Purview provides the information protection and governance layer to secure the Microsoft 365 Copilot and AI ecosystem, enabling data discovery, classification, sensitivity labeling, and multi-cloud compliance.

Explore how to securely integrate Microsoft Purview with Copilot for Microsoft 365 and learn the exact licensing needed: Office 365 E5 and Copilot for Microsoft 365, before demos.

Explore information protection with Microsoft Purview and Copilot for M365, applying sensitivity labels and access controls to department documents. Ensure derived documents inherit labels for cross-department compliance.

Explore information protection in Microsoft Purview by creating and publishing sensitivity labels, auto labeling policies, and classifiers, then apply them to finance documents with Copilot in M365.

Explore auto labeling policies in Microsoft Purview, using client-side and server-side labeling to automatically apply sensitivity labels based on credit card numbers, US social security numbers, or other conditions.

Create an auto labeling policy in Microsoft Purview that auto applies a sensitivity label when content contains a GST number; demonstrate client-side and server-side labeling, simulation mode, and deployment.

Explore data loss prevention with Microsoft Purview, defining sensitive info types and applying Exchange Online policies at the application layer while notifying administrators for insider risk management.

Demonstrate a hands-on lab creating an application-level data loss prevention policy in Microsoft Purview, using a demo credit card policy to block external sharing, trigger alerts, and notify admins.

Learn to implement endpoint data loss prevention policies with Microsoft Purview to stop data exfiltration on compliant, Android-joined devices managed by Intune.

Join a hands-on lab to configure endpoint data loss prevention policies, onboarding devices with Windows versions, Intune or script deployment, and enforcing DLP through policy rules and alerts.

Explore insider risk management with Microsoft Purview, triaging alerts and correlating HR data, defender suite, and eDiscovery signals to prevent data leaks and IP theft.

Implement insider risk management in the Microsoft Purview portal by configuring IAM policies with prebuilt templates for data theft and data leaks, plus adaptive protection and forensic evidence.

Learn how Microsoft Purview communication compliance governs Copilot for M365 communications, detecting inappropriate content and sensitive data, with templates and remediation workflows for insider risk management and litigation holds.

Experience a hands-on lab that demonstrates creating and customizing communication compliance policies in the purview portal, including pre-built and custom templates, conditions, reviewers, and violations.

Discover data lifecycle management with Microsoft Purview, using retention policies, labels, and insider risk considerations to preserve and delete data per regulations.

Learn to implement data lifecycle management in Microsoft Purview, creating container-level retention policies and document-level labels, with static and adaptive options and auto labeling.

Explore data security posture management for AI in Microsoft Purview, including policies, recommendations, and data loss prevention for Copilot for M365 and AI apps.

Explore zero trust essentials, including assume breach, explicit verification, and least privilege, and apply them across identity, endpoints, data, and applications using just in time access with Microsoft security tools.

Explore how Microsoft Defender XDR unifies detection, prevention, investigation, and response across endpoints, identities, email, and apps to enable zero-trust protection. Integrates with Defender endpoints, identities, and cloud apps.

Explore how Microsoft Sentinel uses SOAR to ingest data from Defender XDR and third-party connectors. Build insights with KQL, automate playbooks, and manage incidents.

Explain the differences between Microsoft Sentinel and Defender XDR, portraying Sentinel as the king SIEM/SOAR and Defender XDR as the commander coordinating Defender for Endpoint, Identity, Cloud, and Office 365.

Defender for cloud apps integrates with zero trust principles to protect cloud apps and data from compromised identities, using explicit verification, least-privileged access, and assumed breach.

Compare defender for cloud apps with Microsoft 365 cloud app security to protect and govern apps. Explore app connectors, visibility, data controls, and policy enforcement for Microsoft 365 apps.

Identify Defender for Cloud Apps licenses on your tenant via admin.microsoft.com, including E5 variants and P1/P2 trials, and check Purview and conditional access licensing through security.microsoft.com.

Navigate the defender for cloud apps portal on security.microsoft.com to explore cloud apps, defender for endpoint, and defender for XDR, plus threat intelligence, devices, and policy templates.

learn to unsanction or block generative AI apps with defender for cloud apps, using an Azure ID-joined endpoint; watch virtual machine creation and onboarding videos or skip to the final video.

Onboard an endpoint by creating and configuring an Azure virtual machine, apply app blocking policies to restrict generative AI and social apps, and onboard the VM to the Defender portal.

Onboard a virtual machine to the defender portal using a local onboarding script from device management settings, and confirm the endpoint appears under assets and devices within minutes.

Demonstrates blocking unsanctioned generative ai apps across endpoints using defender for cloud apps and defender for endpoint, with cloud app catalog policies and enforcement apex.

Learn to build file governance policies in Defender for Cloud Apps, integrate with Microsoft Purview for information protection, and apply sensitivity labels to Microsoft 365 files as a DLP policy.

Create threat detection policies in the defender portal and configure an upload-activity policy for OneDrive for business and Copilot for M365, with email alerts as governance actions.

Govern OAuth apps with the Defender portal by reviewing the OAuth apps center, assessing permissions, and creating policies to revoke or ban high-risk apps accessing Microsoft Graph.

Master identity and access management foundations, including just-in-time access, least privilege access, role-based and attribute-based controls, privileged identity management, and defender for identity integration with zero-trust principles.

Explore multi-factor authentication, distinguishing two-factor from multi-factor authentication, using a password plus a second factor like the Microsoft Authenticator app to enable explicit verification under conditional access policies.

Demonstrates setting up multi-factor authentication, creating a new Microsoft 365 user, assigning admin roles, and guiding first sign-in with an auto-generated password and auth app setup.

Explore advanced MFA controls in the Microsoft Admin Center for premium licenses, including per-user enablement, the 14-day activation window, authenticator setup, and account lockout with 90-day blocks.

Discover how conditional access enforces zero-trust policy by evaluating signals from devices, locations, and apps. Learn how machine learning analyzes logs and telemetry to enforce if-then MFA-based policies.

Create a conditional access policy in the Microsoft admin center to require MFA for the Office 365 portal, while allowing sign-in to portal.azure.com from any location.

Learn how privileged identity management (PIM) provides just enough, just-in-time access beyond RBAC, via the Microsoft ID portal to grant start-end dates for storage account contributor roles with MFA.

Open a hands-on demo of privileged identity management in azure, granting a storage account contributor role via pim with active and eligible assignments and just-in-time access.

Apply role-based access control by assigning levels to users or groups across resource, group, subscription, or tenant scopes, including owner and reader roles, and note service principals and managed identities.

Demonstrate role based access control (RBAC) for Azure resources by assigning a storage account contributor role to a user, enabling access to storage account keys and management capabilities.

Learn to interpret the Microsoft Antra ID identity secure score, a 0–100 value updated daily. Implement recommended policies, including insider risk in conditional access, to boost identity security.

Explore governance of Copilot studio agents in Microsoft Entra ID admin center, reviewing agent identities, permissions, roles, conditional access policies, and audit logs to secure automated tasks.

Explore how Microsoft Intune unifies mobile device management and mobile application management to secure endpoints, enable policy-driven device compliance, and integrate with Microsoft Defender for Endpoint and Microsoft Sentinel.

Explore how Intune and Microsoft Defender for Endpoint implement zero trust via explicit verification, least privilege access, and post breach remediation and isolation.

Onboard devices from Intune to Defender for Endpoint by enabling the connector and an EDR policy, then monitor onboarding progress and review exposure scores and recommendations.