Exam AB-900: Microsoft 365 Copilot and Agent Administration

Trace the evolution of AI from rule-based expert systems to discriminative and generative models, and show how Microsoft 365 Copilot acts as an augmentation engine with governance considerations.

Procure a Microsoft 365 Copilot license for a lab with business standard and Copilot. Review pricing and license types (E3, E5, F3), then set up MFA and the admin portal.

Identify high-value AI use cases in Microsoft 365, Copilot, and agents that reduce repetitive work, focusing on sales, HR, information retrieval, and support agents.

Navigate the Microsoft 365 admin center to verify and assign licenses for CoPilot and business plans, then update client apps by installing the latest M365 apps and CoPilot tools.

Understand Microsoft 365's three-pillar ecosystem—productivity apps, intelligent cloud services, and security and identity—and how Copilot orchestrates AI within it. Ensure data readiness and RBAC to keep services healthy and secure.

Position Microsoft Copilot as an AI-powered productivity engine embedded in the Microsoft 365 ecosystem, unlocking creativity, productivity, and skills. Enable cross-app insight to draft, summarize, and automate across apps.

Explore Copilot integration with Microsoft Word to draft a structured three-page corporate wellness proposal, refine sections like budget and wearables, and collaborate with Copilot to transform drafts.

Explore the six responsible AI principles—fairness, reliability and safety, privacy and security, inclusiveness, transparency, and accountability—and how they apply to Microsoft 365 Copilot and agent administration.

Explore Microsoft's official responsible AI documentation and the six core principles—fairness, reliability, privacy and security, inclusivity, accountability, and transparency—as they govern AI in Microsoft 365 Copilot and agent administration.

Understand the shared responsibility model for Microsoft 365 Copilot: Microsoft secures the cloud, you own data, endpoints, and identities, with high availability, scalability, elasticity, and agility supporting AI.

Explore how enterprise AI makes M365 a co-pilot, moving from automation to generative intelligence, with use cases like summaries, email management, and Excel or SharePoint analysis via Microsoft Graph.

Discover how Microsoft Copilot uses large language models and the Microsoft Graph across Word, Excel, and Teams. Data stays in your tenant to power a contextual personal assistant.

Explore the pillars of responsible AI fairness, reliability, privacy, inclusiveness, transparency, and accountability—and learn how human oversight and the shared responsibility model enable trusted Microsoft 365 Copilot deployments.

Understand how Microsoft 365 licensing and access control enable users to use Copilot, covering base licenses (business and enterprise), the Copilot add-on, group-based assignments, and usage location requirements.

Administrators assign licenses to users and groups in the Microsoft 365 admin center and monitor license status and grace periods. They configure group-based licensing for Teams and M365 security groups.

Understand the three core objects in Microsoft 365—Exchange Online for mail and shared mailboxes, SharePoint for sites and libraries, and Teams for channels—and how permissions shape Copilot access.

Licensing defines security features like MFA and conditional access, with E5 unlocking identity protection; manage licenses in the admin center or Enter ID, and distinguish security groups from M365 groups.

Configure Exchange Online mail flow by creating a shared mailbox and a distribution list, assign read and manage permissions, and enable external delivery when needed.

Understand how SharePoint sites, libraries, and permissions shape Copilot’s access to data, including team vs. communication sites, inheritance, and the principle of least privilege for safe AI guardrails.

Create a private SharePoint team site from the Microsoft 365 admin center, configure permissions, and set Microsoft 365 Copilot visibility and sharing options to secure Project Emerald.

Microsoft Teams sits atop a Microsoft 365 group, SharePoint site, and Exchange mailbox, with standard, private, and shared channels, governance using Copilot meeting policies, and two owners with naming standards.

Explore how SharePoint sites underpin content management and intranets, with libraries offering metadata and versioning, and site- or library-level permissions curbing drift; Teams relies on these sites for file storage.

Create a private market strategy team with channels like campaign-ideas. Manage teams and policies in the admin center, and enable private channels, recording, and transcription for copilot AI readiness.

Understand Entra ID, the digital security guard for your organization, via authentication with MFA or passwordless methods, role-based authorization, workload identities, and admin center monitoring.

Explore zero trust in Microsoft 365 by verifying explicitly, applying least privilege, and assume breach to securely use Entra ID, conditional access, end-to-end encryption, and AI with Copilot.

Explore the six pillars of zero trust—identity, endpoints, applications, data, infrastructure, and network—and monitor them in the M365 security center to enable secure-by-design governance.

Explore Microsoft Entra ID, evolution of Azure AD, securing M365 access with MFA and conditional controls. Embrace zero trust—verify explicitly, least privilege, assume breach—with guidance tools and blueprints to begin.

Differentiate authentication from authorization, explain how MFA and single sign on strengthen security, and apply role-based access with least privilege in Microsoft 365 to control who can do what.

Configure MFA in the Entra admin center for secure, seamless access. Explore authentication methods, including FIDO2 passkeys and YubiKeys for passwordless access, and define authentication strengths for conditional access.

Authentication proves identity and authorization grants access; enforce MFA with EntraID using security defaults or conditional access, prioritizing the Microsoft Authenticator app to support number matching in a zero-trust framework.

Combine Defender XDR across endpoints, Office 365, identity, and cloud apps, with ZAP, and let AI correlate signals into a single incident for rapid, unified defense.

Explore how Microsoft Threat Intelligence processes 100 trillion security signals daily with MSTIC analysts, using weather-based naming and TTP insights to detect real-time cyber threats across the globe.

Navigate the Defender for XDR dashboard in security.microsoft.com to convert alerts into incidents, review actions in the action center, and hunt with KQL to strengthen zero trust.

Explore how Microsoft Entra ID uses real-time signals and a zero-trust model to assess sign-in risk, enforce actions like MFA or blocking, and extend these policies to workload identities.

Explore conditional access in the Entra ID portal, compare licenses (p1, p2, governance, and the Entra suite), and see how identity protection and lifecycle workflows shape licensing decisions.

Activate a Microsoft Entra ID P2 license to unlock conditional access with risk-based signals, identity protection, and privileged identity management, via a one-month trial with no automatic renewal.

Configure a conditional access policy by naming it, selecting included users, and targeting Office 365, then apply conditions like user risk, device platforms, locations, and MFA with continuous access evaluation.

Implement privileged identity management to grant just-in-time admin access with justification, MFA, and approval workflows, then manage app registrations for custom agents and enterprise applications for gallery apps.

Microsoft Defender XDR analyzes over 100 trillion signals daily, shields all Defender-protected tenants, and uses conditional access with just-in-time PIM and app registrations to enforce least privilege.

Configure privileged access with Privileged Identity Management in Entra, enforcing four-hour activation, MFA on activation, required justification, and approval workflows to reduce standing admin power.

Explore app registrations and enterprise applications in Entra, create a financial audit bot, define redirect URLs and app IDs, grant Microsoft Graph permissions, and apply admin consent with conditional access.

Explore how identity secure score guides security posture, and how audit logs provide immutable evidence of admin actions in Entra ID, with forensic filters and recommended improvements.

Explore sign-in logs and diagnostic logs in the Entra admin center to troubleshoot failed sign-ins, inspect user principal name, location, device details, and conditional access policies.

Explore identity protection with risky users, risky sign-ins, and risk detections in Entra IDP2. Learn how real time alerts, atypical travel, and the zero trust kill switch protect the enterprise.

Explore Microsoft Purview as a unified governance engine that protects the data estate with three pillars: data security, data governance, and risk and compliance, empowering responsible AI with Copilot.

Navigate Microsoft Purview portal from the M365 admin center, explore the dashboard and solution cards, and locate data lifecycle management, information protection, and data loss prevention under role-based access control.

Learn how information protection and data loss prevention work together to secure data at rest and in motion, using SITs, persistent sensitivity labels, encryption, and DLP policies with Copilot.

Create and configure a highly confidential sensitivity label called Project Phoenix confidential, enabling encryption, scope to files and emails, and automatic labeling with strict privacy and access controls.

Explore Microsoft Purview insider risk management and communication compliance to detect internal threats, prevent data leaks, and enforce regulatory and corporate policy with real-time AI.

Learn insider risk management with Purview, from analytics-driven policy recommendations and privacy-preserving triage to AI-driven insights, reports, adaptive protection, and forensics evidence.

Implement data lifecycle management with retention policies and labels to govern deletion and preservation, employ legal holds and disposition reviews, and align with GDPR rights and audit readiness.

Create an executive data archive retention policy in Purview, compare static and adaptive scopes, apply to locations like Exchange, SharePoint, Teams, and set retention period and start rules.

Learn how Microsoft Graph powers Copilot’s data access via retrieval augmented generation (RAG), enforcing permissions and preserving identity isolation with just-in-time, encrypted processing.

Trace copilot's four-phase data flow from app prompts through grounding with Microsoft Graph to Azure OpenAI, then back to the user, with tenant data.

Copilot operates inside your Microsoft 365 boundary, inheriting existing security controls. Purview and Defender uphold the six core values—fairness, reliability, privacy, inclusiveness, transparency, accountability—and provide citations and audit logs.

Explore how Copilot integrates with Microsoft Purview, enabling DSPM for AI, Purview audit activation with E3/E5 licenses, and recording user and admin activities, plus DLP policies for Copilot data.

Use Compliance Manager as a control tower to analyze your Microsoft 365 setup against GDPR, SOC2, and AI governance templates, get a compliance score, prioritize actions, and generate audit-ready evidence.

Explore the compliance manager to monitor real-time compliance scores, view data protection baseline, and apply improvement actions like governing global admin roles and data loss prevention policies, including ai regulations.

Use Data Explorer to visualize sensitive data at rest across the tenant and locate hotspots, then audit with Activity Explorer who did what, when, and from where, including Copilot interactions.

Apply restricted site access to harden a SharePoint site, making it the master gatekeeper that blocks unauthorized access and curbs oversharing for Copilot-driven insights.

Explore the SharePoint admin center reports in admin.cloud.microsoft, focusing on data access governance, sharing links, and permission audits to identify over-sharing and prepare for cleanup.

Protect data exposure in Microsoft 365 Copilot by using SharePoint advanced management, restricted site access, and restricted content discovery to prevent oversharing.

Enable organization-level restricted site access in the SharePoint admin center, limit site access to up to 10 groups for Project Emerald, and enable restrict content from Microsoft 365 Copilot.

Discover DSPM for AI through Purview’s AI hub, cross-referencing sensitivity labels with AI prompts, and enforcing policies to prevent shadow AI, prompt injections, jailbreaking, and data leaks.

Navigate unified DSPM for AI dashboard in the Purview portal, enable auditing, and configure collection policies to capture copilot and enterprise AI interactions while detecting sensitive information shared with AI.

Master content search and eDiscovery in Microsoft Purview by using integrated search, KQL queries, review sets, and holds to build defensible, audit-ready evidence across Exchange, SharePoint, OneDrive, and Teams.

Search across mailboxes and sites with content search in eDiscovery, refine with KQL, and apply a hold to create a data-driven audit narrative.

Discover how Microsoft Purview governs data, enables information protection and DLP through labels, and uses insider risk management to detect unusual user activity and protect data.

Learn data lifecycle management and visibility to reduce risk and improve compliance posture. See how data explorer and activity explorer reveal access and usage to strengthen governance.

Rely on Microsoft Graph to enforce existing permissions and inherited identity controls for Copilot data access, reveal data flows for auditing, and monitor AI risk with DSPM for AI.

Identify oversharing in modern SharePoint with data access reports, use RSA policies, and leverage Copilot safeguards, Purview content search, and eDiscovery for legal holds and PST exports.

Enable Copilot as general productivity engine across Microsoft 365, using Microsoft Graph and RAG to summarize and draft, while deploying custom agents as department-specific experts that execute tasks via plugins.

Explore Copilot's features in Word by drafting a report for Project Alpha with market goals, budget estimates, and a six-month plan, save to OneDrive, and test retrieval via indexing latency.

Open PowerPoint and let Copilot create a presentation from the annual strategy report, outlining sections and layouts, with the designer tab tailoring imagery, branding, and slide previews.

Explore Copilot’s built-in features in Teams and OneDrive, enabling cross-app retrieval via Microsoft Graph. Summarize documents, generate FAQs and audio overviews, and extract meeting insights from transcripts.

Navigate Copilot licensing options—from per-user subscriptions and E7 bundles to consumption-based credits for custom agents—and learn group-based Entra ID license assignment to optimize costs.

Learn how to assign Microsoft 365 Copilot licenses, use group-based licensing via Entra ID, and update licenses to display the Copilot icon in Word and Excel.

Monitor copilot usage and adoption with detailed analytics, identify adoption gaps, and prove ROI via Viva Insights and agent dashboards; enforce pay-as-you-go controls and lifecycle rules to optimize costs.

Audit the Copilot Analytics dashboard to move beyond licenses, assess user behavior across m365 services and apps, and track telemetry gaps, data ingestion delays, and adoption deficits in baseline phase.

Manage copilot prompts as corporate assets using the prompt gallery and team library to share high-value templates. Schedule prompts and govern retention to create a proactive, standardized AI workflow.

Create a reusable copilot prompt gallery and collaborative library to share across your department. Set up teams, channels, and OneDrive prompts to enable cross-app intelligence with Microsoft 365 Copilot.

Meet the researcher agent, a multi-step reasoning engine in Microsoft 365 that uses iterative discovery and a high-level plan, with sandboxed execution via a Windows 365 VM.

See how the analyst agent acts as a data scientist within Microsoft 365, using a sandboxed code interpreter to perform multi-dimensional data correlations, predictive insights, and governance-enabled data handling.

Explore custom agents that extend Copilot with your data, rules, and workflows, grounding them in SharePoint, external databases, and apps to act as digital workers.

Publish agent in Copilot Studio, set its distribution scope, and enforce enterprise access via EntraID with persona-based groups, agentic policies, SeeMyAccess transparency log, and access reviews to prevent data risk.

Enforce automated approval workflows and trust gates for AI agents, monitor reasoning health with the agent 365 overview dashboard, and implement lifecycle reviews and auto-archiving to protect ROI.

Differentiate co-pilot from autonomous agents, and learn licensing and seat assignments for Microsoft 365 Copilot, including studio capabilities, prerequisites, and agents tailored to your business data for automation.

Monitor AI value by tracking app usage with Microsoft 365 usage reports and co-pilot dashboard in Viva Insights, while teaching prompt engineering framework and sharing pre-built prompts to boost ROI.

Explore how the Researcher Agent autonomously synthesizes data from internal and external sources to produce comprehensive, attributed reports for market analysis, regulatory updates, and technical insights.

Build custom agents with Copilot Studio, a low-code platform for triggers, knowledge sources, and connectors to external systems. Enforce guardrails, admin reviews, and lifecycle analytics to ensure safe deployment.

Master modern AI-enabled workplace administration by securing data, governing use with Purview, and configuring Microsoft 365 Copilot and Agents across the tenant.

Prepare for the AB-900 exam by shifting from a power user to an administrator, focusing on tenant structure, identity management, and governance tools like sensitivity labels and retention policies.

Discover how a dynamic AI-powered ecosystem links Entra ID to Microsoft Purview, with Copilot as connective tissue, and prep for AB-900 through shared responsibility, zero-trust, and licensing insights.

Examine the shift from assisted AI to agentic AI in Microsoft 365, with autonomous agents, WorkIQ, and multi-model reasoning. Discover how administrators orchestrate a digital workforce and govern ARD actions.

Discover two career paths in Microsoft 365 administration—AI ops manager and modern workplace architect—focusing on managing AI agents, data grounding, governance, and digital transformation.

Explore how AI reshapes the M365 playbooks. Highlight governance, security, prompt engineering, data governance, AI ethics, and new roles like co-pilot success managers and AI architects.