Is AB-900 worth it? Who should take it
AB-900 is worth it if you administer, support or roll out Microsoft 365 in an organisation that is adopting Copilot and agents. It is a short, inexpensive fundamentals exam that never expires, and it covers the questions every Copilot rollout raises: who can see what, how data is protected, and who pays for which licence. It is less worth it if you already hold associate-level Microsoft 365 or security certifications, or if your work is building agents rather than governing them.
Who it is for
Microsoft 365 and Teams administrators. This is the core audience. The exam formalises what you already do and adds the Copilot and Purview knowledge that your role is now expected to include.
IT staff leading a Copilot rollout. Oversharing, sensitivity labels, licensing and agent approval are the practical rollout problems. AB-900 is a structured way to learn all of them at once.
Former MS-900 holders. MS-900 has retired. If you want a current Microsoft 365 credential that reflects Copilot, this is the natural next step. See AB-900 vs MS-900.
Help desk and support staff. Sign-in troubleshooting, licences, mailboxes and site permissions are daily support work, and the exam covers them.
Compliance and data governance staff who need to understand how Copilot interacts with the controls they own.
Who should pick something else
| If you | Consider instead |
|---|---|
| Build agents in Copilot Studio | AB-620 |
| Build AI apps and agents in code on Azure | AI-103 |
| Are new to AI on Azure rather than Microsoft 365 | AI-901 |
| Secure cloud and AI workloads for a living | SC-500 |
AB-900 and AB-620 are often confused because both mention agents. AB-900 is about governing and administering Copilot and agents in a Microsoft 365 tenant. AB-620 is an associate exam about designing and building agents in Copilot Studio. An admin needs the first; a maker needs the second.
What it costs
| Cost | Amount |
|---|---|
| Exam fee | Set per country or region; shown when you book |
| Student route | Students and educators can schedule through Certiport |
| Retake | Full fee again; you can retake after 24 hours, with longer waits for later attempts |
| Renewal | None; fundamentals certifications do not expire |
| Lab time | A trial tenant is free for a limited period; some features need licences a trial may not include |
| Study time | About four weeks for someone who uses Microsoft 365 at work |
No renewal is a real advantage: pass once and the credential stays on your profile.
What it proves
A pass shows that you can:
- find your way around the Microsoft 365 admin centers and know which one owns which object;
- explain Zero Trust, conditional access, SSO and the main Entra ID security features;
- choose the right Purview tool to classify, protect, retain or investigate data;
- explain how Copilot uses data and permissions, and how to limit oversharing;
- handle basic Copilot and agent administration: licences, billing, usage and approvals.
For employers rolling out Copilot, that is a relevant, current set of skills.
What it does not prove
It is a fundamentals certification. It does not show that you can design a Purview deployment, build conditional access for a large enterprise, or build agents. Hiring managers for senior admin roles will look for associate-level certifications and experience. Treat AB-900 as a foundation and a signal of current knowledge, not as a senior credential.
The verdict
Take AB-900 if you are responsible for a Microsoft 365 tenant where Copilot is arriving, or if you held MS-900 and want a current equivalent. It costs little time, never expires, and teaches the rollout risks that matter most. If you build agents, go to AB-620 instead. The four-week study plan is the place to start, and the Azure AI certification path shows how Microsoft’s AI exams fit together.