Master Microsoft 365 Copilot administration and governance. This comprehensive guide covers security, licensing, data protection, and agent lifecycle management for IT professionals.
IT administrators, security administrators, and compliance professionals managing Microsoft 365 Copilot environments.
40-60 multiple-choice and scenario-based questions in 45 minutes; passing score is 700/1000.
Core M365 features (30-35%), Data protection & governance (35-40%), Copilot/Agent admin tasks (25-30%).
Plan for 15-25 hours over 4 weeks; familiarity with M365 admin centres recommended.
The Microsoft AB-900 exam, officially titled Microsoft 365 Certified: Copilot and Agent Administration Fundamentals, validates your ability to support, secure, and protect AI-enabled Microsoft 365 environments. This is a fundamentals-level certification designed for IT administrators who need to deploy and manage Microsoft 365 Copilot and AI agents.
Important: This is NOT an Azure exam. AB-900 focuses exclusively on Microsoft 365 Copilot administration within the Microsoft 365 ecosystem—not Azure AI services, Azure OpenAI, or the Azure portal. The exam covers Microsoft 365 admin centres, Microsoft Purview governance, and Microsoft Entra security.
This certification demonstrates that you can manage Copilot licensing and billing, configure data protection policies, implement security controls, and oversee agent lifecycle management. It is particularly valuable as organisations accelerate AI adoption and require administrators who understand both the technical and governance aspects of AI-enabled productivity tools.
AB-900 is currently in beta. Results may not be immediately available, and practice assessments are typically released 8 weeks after general availability. Exam content may be updated as features move from preview to GA.
Microsoft 365 administrators managing Copilot deployments, licensing, and user access across the organisation.
Professionals responsible for AI governance, conditional access policies, and threat protection in Copilot environments.
Staff managing Microsoft Purview, DLP policies, sensitivity labels, and data protection for AI workloads.
Support staff assisting users with Copilot access, troubleshooting issues, and resolving permission problems.
While there are no mandatory prerequisites for AB-900, candidates should have foundational knowledge in the following areas to succeed:
IT professionals preparing for AB-900 must be familiar with these five key admin portals. Understanding how to navigate and perform tasks in each centre is essential for exam success.
Licensing, users, organisation settings, Copilot settings
Identity, access, conditional policies, SSO, PIM
DLP, retention, eDiscovery, compliance, DSPM for AI
Sites, permissions, oversharing controls, data access governance
Agent connectors, environments, agent approval workflows
The AB-900 exam covers three main domains. Understanding the weight of each domain helps you prioritise your study time effectively. Below is a detailed breakdown of what you need to know for each section.
This domain focuses on understanding Microsoft 365 core objects, security principles, and core security features. You must demonstrate knowledge of admin centre navigation, identity management, and threat protection.
The largest domain covers Microsoft Purview capabilities, Copilot data security implications, risk identification, and SharePoint oversharing controls. This is critical for securing AI workloads.
This domain covers the practical aspects of administering Microsoft 365 Copilot and AI agents, including licensing, billing, usage monitoring, and agent lifecycle management.
Combine official Microsoft Learn content with hands-on practice in admin centres. Set up a Microsoft 365 trial or developer environment to practise Copilot administration, Purview policies, and Entra configurations before your exam.
This structured study plan assumes 30-60 minutes of study per day. The plan is designed for IT professionals with existing Microsoft 365 admin experience. Adjust based on your familiarity with Copilot and Purview.
Days 1-7: Build your understanding of M365 core objects and security
Days 8-14: Master Microsoft Purview and Copilot data security
Days 15-21: Hands-on Copilot and agent administration
Days 22-30: Polish, practise, and build confidence