AB-900 course
AB-900 free course: Copilot and agent admin
A free written AB-900 course in 12 lessons with diagrams: Microsoft 365 basics, data protection, Copilot administration and agents, in exam order.
This free written course teaches the AB-900 skills outline from the ground up, in the order the exam is built. Each lesson takes about five to seven minutes to read, builds one idea with a diagram or a worked example, and ends with three check questions. No account is needed.
The lessons follow the skills outline as published on October 14, 2026, the version that applies to the exam now. The three skill areas map to the lessons like this:
| Lessons | Skill area | Weight |
|---|---|---|
| 1 to 4 | Core features and objects of Microsoft 365 services | 30–35% |
| 5 to 8 | Data protection and governance for Microsoft 365 and Copilot | 35–40% |
| 9 to 11 | Administrative tasks for Copilot and agents | 25–30% |
| 12 | All three together: how the questions are built | – |
How to use the course
Read the lessons in order the first time, because later ones assume the vocabulary of earlier ones: the data protection lessons rely on the permissions model from lessons 1 to 3, and the Copilot lessons rely on both. After a lesson, answer its check questions before reading the next one.
When the order is clear, use the other guides for what a course cannot do. The exam format page explains the 45-minute exam and the scaled score. The study plan spreads the work over four weeks. The cheat sheet is the page to reread the day before. The free practice test and sample questions show how scenario questions read.
Lessons
- Tenant and licencesLearn what a Microsoft 365 tenant is, how domains and org settings work, and how user and group licences decide which features each person gets.
- Where data livesSee where mail, files and Teams chats are stored in Microsoft 365, and which admin center manages mailboxes, sites, libraries, teams and SharePoint roles.
- Sign-in and accessUnderstand Microsoft Entra ID sign-in: authentication vs authorisation, MFA, SSO, conditional access, Zero Trust and how to troubleshoot a blocked user.
- Security operationsLearn Defender XDR, threat intelligence, Identity Secure Score, audit logs, PIM and the difference between app registrations and enterprise applications.
- Sensitivity labels and retentionLearn how Purview classifies data, what a sensitivity label can encrypt, mark and protect, and how retention differs. A worked 200-person example included.
- Finding and responding to riskMatch a problem to the right Purview tool: DLP alerts, Insider Risk, Communication Compliance, activity explorer, Compliance Manager and Content search.
- Copilot and your dataHow Microsoft 365 Copilot reaches data through Microsoft Graph, why user permissions limit answers, and which Purview and Defender controls apply.
- Oversharing in SharePointFind and fix SharePoint oversharing before Copilot rollout: data access governance reports, SharePoint Advanced Management and restricted access control.
- Copilot, agents and billingCompare Copilot Chat, Microsoft 365 Copilot and agents, pick Researcher, Analyst or a custom agent, and choose per-user licences or pay-as-you-go.
- Administering CopilotAssign Copilot licences, manage pay-as-you-go billing policies, read usage and adoption reports and manage saved, shared and scheduled prompts.
- Administering agentsControl who can use agents, follow an agent from creation through admin approval, and monitor it in the Microsoft 365 and Power Platform admin centers.
- Putting it togetherApply AB-900 skills across all three domains: a symptom-to-tool table, three worked scenarios and a reading routine for questions in a 45-minute exam.