P2. Copilot and agent administration

Outcome: you can set up, protect and monitor Microsoft 365 Copilot and agents in a tenant, and find oversharing before Copilot surfaces it.

Before you start: S2, S3 and S6, and a Microsoft 365 Business free trial in a new tenant of your own (see Plans and cost above).

Skills: the Microsoft 365, Exchange, SharePoint and Teams admin centers; licences; users and groups; Microsoft Entra ID sign-in security (MFA, conditional access, single sign-on, Secure Score, audit logs); Microsoft Purview (sensitivity labels, data loss prevention, retention, content search, Compliance Manager); SharePoint sharing and oversharing reports; Copilot settings in the Microsoft 365 admin center (the Copilot Control System, web search, usage reports); Copilot licensing (monthly or pay-as-you-go); agent creation, approval and monitoring in the Microsoft 365 and Power Platform admin centers.

Courses: AB-900T00: Explore Microsoft 365 administration, and Explore Microsoft 365 Copilot and agent administration.

Labs

1. Tenant: start the trial, add five test users and two groups, and assign licences. Turn on MFA for every account.
2. Oversharing: create two SharePoint sites with sample files. Share one too widely, then find it with SharePoint's sharing and access reports and fix it.
3. Protect data: create a sensitivity label and a data loss prevention policy for a made-up ID number pattern, and test them with a sample file. Never use real data.
4. Copilot controls: in the Microsoft 365 admin center, pin Copilot Chat for users, turn off web search for one group, and read the usage report.
5. Agents: build a simple FAQ agent as a test user. Then, as admin, find it, decide who may create agents, and approve or block it. Read how pay-as-you-go billing works, but don't link a payment method.
6. Audit: find your own admin changes in the audit log and run a content search for a test word.
7. Close down: export your notes and screenshots, then cancel the trial by turning off recurring billing. Write down the date.

Prove it: a one-page tenant runbook: what you turned on, what you locked down, the oversharing you found and fixed, and your agent policy, with screenshots. A partner reviews it.

Certs: AB-900 (Microsoft 365 core features and objects 30–35%, data protection and governance for Microsoft 365 and Copilot 35–40%, Copilot and agent administration 25–30%).

Gate: AB-900 happens here, with one review week. Take the free practice assessment on Microsoft Learn first.