The Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900) is Microsoft's entry-level certification for administrators supporting AI-enabled Microsoft 365 environments. It is built for people who need to understand the basics of Microsoft 365 administration, Copilot readiness, governance, and the first layer of agent administration without jumping straight into advanced implementation work.
This is a fundamentals exam. Microsoft is testing whether you can recognize the core Microsoft 365 objects, understand how Copilot and agents fit into the tenant, and identify the right governance or admin control for common scenarios. That means your preparation should focus on service relationships, data-protection and governance concepts, and the main administrative tasks available in Microsoft 365 and Copilot.
Because AB-900 is new, it is especially important to stay close to the official Microsoft Learn material rather than relying on recycled older Microsoft 365 admin notes. The current Microsoft course and learning paths are the most authoritative outline of what this exam expects.
Exam At a Glance
| Attribute | Value |
|---|---|
| Certification | Microsoft 365 Certified: Copilot and Agent Administration Fundamentals |
| Exam code | AB-900 |
| Level | Fundamentals |
| Duration | 45 minutes |
| Cost | $99 USD |
| Prerequisites | No formal prerequisite; Microsoft expects familiarity with Microsoft 365 core services, identity, security, and governance basics |
| Target candidate | Beginners, Microsoft 365 administrators, support staff, and IT professionals preparing to support Copilot-enabled environments |
| Primary focus | Microsoft 365 administration basics, data protection and governance for Copilot, and introductory Copilot and agent administration |
- Official certification page: Microsoft 365 Certified: Copilot and Agent Administration Fundamentals
- Official study guide: AB-900 study guide
- Official course: Introduction to Microsoft 365 and AI administration
- Official practice assessment: Microsoft practice assessment
Official Assessed Areas
- Identify the core features and objects of Microsoft 365 services
- Understand data protection and governance tasks for Microsoft 365 and Copilot
- Perform basic administrative tasks for Copilot and agents
AB-900 is narrower than a general Microsoft 365 admin exam. Microsoft is not trying to make you a full platform specialist here. It wants proof that you understand the environment Copilot runs in, the governance responsibilities that come with AI access to organizational data, and the beginner-level admin actions needed to support adoption.
1. Identify the Core Features and Objects of Microsoft 365 Services
This section tests whether you understand the tenant objects, workloads, and administrative surfaces that Copilot and agents depend on.
- Microsoft 365 tenant and workload basics - Start with the official Microsoft 365 administration learning path. You should understand the main workloads, admin centers, and how Microsoft 365 services fit together operationally. Official resources: Explore Microsoft 365 administration, AB-900 course.
- Users, groups, teams, sites, and libraries - Microsoft explicitly calls out the core Microsoft 365 objects available across the platform. These matter because Copilot and agents surface, use, and respect the content and permissions attached to them. Official resource: Microsoft 365 administration learning path.
- Identity and access context for Microsoft 365 - Even though AB-900 is a Copilot exam, it still assumes you understand authentication methods, conditional access, and SSO as baseline admin concepts. Official resources: Microsoft 365 administration path, Certification overview.
- Admin centers and management surfaces - Be clear on the fact that Copilot administration sits on top of broader Microsoft 365 administration rather than replacing it. Microsoft mentions Exchange Online, SharePoint, Teams, Entra, and Purview as part of the expected background. Official resources: Certification overview, Administration learning path.
- This domain is about object recognition and service fit - The right answer is usually the one that correctly identifies what object or workload is involved, not the one with the most AI terminology. Official resources: Microsoft 365 administration path, AB-900 course.
Exam tip: If the question sounds like a Microsoft 365 object or service-location question, answer it as a Microsoft 365 administration problem first and as an AI problem second.
2. Understand Data Protection and Governance Tasks for Microsoft 365 and Copilot
This section is where AB-900 separates itself from a generic productivity-tool exam. Microsoft wants you to understand that AI administration is inseparable from data protection, access control, and governance.
- Copilot uses existing Microsoft 365 permissions - A core idea for this exam is that Copilot does not create a separate permission universe. It surfaces data based on the access model already present in Microsoft 365. Official resources: Certification overview, Explore Microsoft 365 Copilot and agent administration.
- Data protection and governance responsibilities - Microsoft explicitly tests data protection and governance tasks, so you should review how governance, privacy, and tenant controls intersect with AI-enabled access to organizational content. Official resources: Copilot and agent administration learning path, Certification page.
- Identity and conditional access still matter - Copilot administration does not replace normal identity hygiene. Expect Microsoft to connect governance thinking back to authentication, conditional access, and secure administrative practice. Official resources: Certification overview, Administration learning path.
- Governance questions are about safe enablement - Microsoft is not only asking whether Copilot can be turned on. It is asking whether it is turned on in a way that respects tenant controls, data boundaries, and organizational policy. Official resource: Copilot and agent administration path.
- Think in terms of readiness and control - The best answer often balances user productivity with the governance measures needed to support an AI-enabled environment safely. Official resources: AB-900 course, AB-900 study guide.
Exam tip: If the question is about protecting organizational data, controlling access, or governing how Copilot interacts with Microsoft 365 content, think governance and readiness controls before you think about feature enablement.
3. Perform Basic Administrative Tasks for Copilot and Agents
This section tests whether you understand the beginner-level admin actions involved in supporting Copilot and agents after the tenant basics and governance foundation are in place.
- Copilot administration fundamentals - Use the dedicated Microsoft Learn path for Copilot and agent administration as your main study source here. It is the closest public representation of what Microsoft wants candidates to understand. Official resources: Explore Microsoft 365 Copilot and agent administration, AB-900 course.
- Agent administration at the fundamentals level - This exam does not expect deep development skill. It expects you to understand what agents are in this ecosystem, where basic administrative tasks live, and how they connect to Microsoft 365 services and governance controls. Official resource: Copilot and agent administration learning path.
- Administrative tasks are framed by service boundaries - Microsoft wants you to know that enabling, supporting, and governing Copilot features happens inside a larger Microsoft 365 administration model. Official resources: Certification overview, Microsoft 365 administration path.
- Do not overcomplicate the admin scenarios - AB-900 is fundamentals-level, so the correct answer is typically the simplest supported administrative action, not an advanced architecture or custom agent-development workflow. Official resource: Copilot and agent administration path.
- Read for what the administrator is being asked to do - Is the scenario about tenant objects, governance readiness, or a basic Copilot or agent admin task? That split usually tells you the right domain immediately. Official resources: AB-900 study guide, AB-900 course.
Exam tip: When Copilot or agent questions become wordy, strip them back to the admin intent: identify the object, confirm the governance boundary, then choose the basic supported administrative action.
Recommended 3-Week Study Plan
| Week | Focus | Primary resources |
|---|---|---|
| 1 | Microsoft 365 administration basics, tenant objects, workloads, admin centers, identity context | Microsoft 365 administration learning path, AB-900 course |
| 2 | Data protection, governance, access controls, Copilot readiness, safe enablement concepts | Copilot and agent administration learning path, certification page, study guide |
| 3 | Basic Copilot and agent administration tasks, official practice assessment, mixed review | AB-900 course, Copilot and agent administration path, Microsoft practice assessment |
Last-Mile Exam Strategy
- Study this exam as Microsoft 365 administration plus AI governance, not as a general AI theory exam.
- Stay close to the official Microsoft Learn course and paths. AB-900 is new enough that unofficial summaries are more likely to be incomplete or outdated.
- Memorize the three assessed areas and classify each practice question into one of them before answering.
- Keep the main mental model simple: Microsoft 365 objects and permissions first, governance second, Copilot and agent admin actions third.
- Use the official Microsoft practice assessment. For a new exam like AB-900, it is the best indicator of question style and wording.
The best companion resource for this certification right now is Microsoft's own practice assessment. If you want adjacent fundamentals preparation inside this repo, our SC-900 study guide helps with the identity, security, and governance language that overlaps with AB-900.
The fastest route to passing AB-900 is to think like a Microsoft 365 administrator supporting AI safely. Learn the tenant objects, understand how Copilot relies on existing permissions and governance controls, and practice choosing the simplest correct admin action for a scenario. That is the behavior Microsoft is measuring.