AB-650: Administer Microsoft 365 and AI services

Copilot and AI agents are now part of Microsoft 365. Are you ready to manage them? Our AB-650 certification teaches you how to administer Microsoft 365 and AI Services, protect company data, and set up Microsoft 365 Copilot and AI agents securely. It’s for IT professionals growing their careers and for teams getting ready to roll out Copilot. This training also prepares you for the AB-650 certification, Microsoft 365 and AI Services Administrator Associate.

The AB-650: Administer Microsoft 365 and AI services course equips administrators to configure, manage, secure, and govern Microsoft 365 and AI services. Learn to administer Microsoft 365 tenants, identities, licensing, collaboration workloads, and service health. Configure identity, access, threat protection, information protection, and data governance using Microsoft Entra, Defender, and Purview. Prepare, deploy, configure, and monitor Microsoft Copilot while supporting secure organizational adoption. Manage and govern AI agents using Microsoft Entra Agent ID and Microsoft Agent 365, including agent identities, access, monitoring, security, and optimization.

Key takeaways

You will learn how to:

Configure and manage Microsoft 365 tenants, domains, organizational settings, branding, and administrative roles
Assign and troubleshoot Microsoft 365 and AI service licenses, including group-based licensing and pay-as-you-go AI services
Monitor Microsoft 365 service health, connectivity, usage, adoption, backup, and resilience
Configure and administer Exchange Online, Microsoft Teams, SharePoint, and OneDrive workloads
Manage SharePoint and OneDrive permissions, sharing, discovery, and access controls to support secure Microsoft Copilot usage
Provision and govern users, guests, groups, administrative units, and privileged roles in Microsoft Entra
Configure authentication methods, self-service password reset, Password Protection, and Conditional Access
Configure Microsoft Defender for Office 365 threat protection and investigate and respond to collaboration threats
Implement Microsoft Purview sensitivity labels, information protection, data loss prevention, and data lifecycle controls
Assess organizational and data readiness for Microsoft Copilot and plan phased Copilot deployments
Configure Microsoft Copilot settings, web search, Copilot Search, connectors, Cowork, and supported extensibility options
Establish and secure AI agent identities using Microsoft Entra Agent ID and Conditional Access
Curate and control agents, tools, and MCP servers using Microsoft Agent 365 capabilities
Monitor agent inventory, activity, performance, exceptions, and security risks
Apply policies, permissions, lifecycle controls, and governance practices to AI agents
Monitor Microsoft Copilot and agent adoption, service health, usage, and costs to optimize Microsoft 365 AI services

Prerequisites

Required

Experience administering Microsoft 365 workloads, including Exchange Online, SharePoint, Microsoft Teams, and OneDrive
Working knowledge of Microsoft Entra ID and core identity and access concepts
Experience with cloud-based productivity services at an administrator level
Familiarity with Microsoft Copilot and its core capabilities
Basic understanding of DNS concepts

Beginner-level PowerShell knowledge and familiarity with Microsoft Graph PowerShell
Familiarity with Microsoft 365 security, compliance, and governance concepts
Basic knowledge of Microsoft Defender for Office 365 and Microsoft Purview
Understanding of Conditional Access, authentication methods, and privileged access management
Familiarity with AI agents and enterprise AI governance concepts

Target audience

Microsoft 365 Administrator

Se alle kurs innen dette fagområdet

Certification:

This course leads to the Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate certification.

Learning objectives:

Configure and manage Microsoft 365 tenants and workloads

Provision and brand a Microsoft 365 tenant
- Introduction
- Understand the Microsoft 365 tenant
- Assign least-privilege administrator roles
- Add and verify a custom domain
- Exercise - Delegate domain administration and add a custom domain
- Configure organization branding across two portals
- Exercise - Configure organization branding
- Configure organizational settings
- Exercise - Configure organizational settings
License Microsoft 365 and AI services at scale
- Introduction
- Assign and manage Microsoft 365 licenses
- Verify and troubleshoot license assignments
- Exercise - Verify group-based license assignments
- License AI services for the right populations
- Understand how Microsoft 365 billing is structured
- Set up pay-as-you-go billing for AI-service usage
- Exercise - Configure pay-as-you-go billing for a Microsoft Copilot Chat agent pilot
Keep a Microsoft 365 tenant resilient and healthy
- Introduction
- Configure Microsoft 365 Backup for critical workloads
- Exercise - Configure Backup for Relecloud's critical workloads
- Monitor service health and configure notifications
- Diagnose network connectivity issues affecting Microsoft Copilot
- Exercise - Diagnose Relecloud's satellite-office Microsoft Copilot connectivity failure
- Monitor Microsoft 365 usage and adoption
- Exercise - Interpret Relecloud's Microsoft Copilot adoption data
- Recognize the endpoint and client-management ecosystem
Configure Exchange Online and Microsoft Teams workloads
- Introduction
- Create and manage mailboxes
- Delegate mailbox access: Full Access, Send As, and Send on Behalf
- Exercise - Configure Relecloud shared mailboxes and delegate access
- Understand how mail routes through Exchange Online
- Create and manage teams, channels, owners, and members
- Configure Microsoft Copilot in Teams meetings
- Exercise - Build a Microsoft Copilot-ready team for Relecloud's account managers
Govern SharePoint and OneDrive for Microsoft Copilot
- Introduction
- Create and manage SharePoint sites
- Set the boundary: SharePoint and OneDrive sharing settings
- Find overshared sites before Microsoft Copilot does
- Exercise - Set up a safe Finance lab site and audit sharing
- Limit broad discovery, not access: Restricted Content Discovery
- Enforce access with Restricted Access Control
- Troubleshoot legacy Restricted SharePoint Search
- Choose the right control for the job
- Exercise - Apply and verify Restricted Content Discovery

Govern and secure Microsoft 365 tenants and workloads

Provision and govern identities in Microsoft Entra
- Introduction
- Manage the user and contact lifecycle
- Perform bulk identity management with Microsoft Graph PowerShell
- Exercise - Bulk-provision Relecloud's new-hire users with Microsoft Graph PowerShell
- Manage guests and external collaboration
- Create and manage groups, naming policy, and expiration policy
- Scope delegated administration with administrative units
- Exercise - Scope Relecloud's regional HR admin with an administrative unit
- Govern roles with role groups and Privileged Identity Management
- Exercise - Configure a PIM approval workflow for Relecloud privileged role
Implement authentication and access in Microsoft Entra
- Introduction
- Evaluate and scope the authentication method catalog
- Enforce Password Protection for cloud accounts
- Enable and troubleshoot self-service password reset
- Exercise - Scope authentication methods and enable SSPR for Relecloud's engineering team
- Evaluate Conditional Access policies and client app conditions
- Investigate and resolve authentication issues
- Resolve sign-in risk and device compliance in Conditional Access
- Exercise - Design and verify Conditional Access pilot policies
Secure email and collaboration with Microsoft Defender for Office 365
- Introduction
- Configure threat policies: presets, custom policies, and precedence
- Configure the settings inside each threat policy
- Extend protection to Teams, SharePoint, and OneDrive
- Exercise - Configure and scope threat protection for Relecloud's finance team
- Manage alerts and investigate threats
- Remediate and reduce human risk: AIR and attack simulation training
- Exercise - Investigate a threat and reduce human risk with attack simulation training
- Coordinate with the broader Microsoft Defender security estate
Protect information with Microsoft Purview information protection
- Introduction
- Choose a classification technique for a data shape
- Exercise - Create a custom sensitive information type for Woodgrove's transaction pattern
- Design what a sensitivity label protects
- Publish label policies and resolve conflicting settings
- Exercise - Configure and publish a sensitivity label policy, then verify priority resolution
- Verify classification is working with Purview reporting
- Verify classification supports safe Microsoft Copilot grounding
Prevent data loss and govern the data lifecycle with Microsoft Purview
- Introduction
- Specify DLP requirements across Microsoft 365 locations
- Exercise - Create a DLP policy for Microsoft Copilot
- Attribute DLP alerts across AI apps and agents
- Respond to DLP alerts in Microsoft Defender XDR
- Exercise - Review a DLP alert in Microsoft Defender XDR
- Specify data lifecycle management requirements
- Monitor AI activity and oversharing risk with Data Security Posture Management
- Exercise - Review a data risk assessment in Data Security Posture Management
- Recognize the broader Microsoft Purview governance surface

Manage and secure Microsoft 365 AI services

Assess readiness and roll out Microsoft Copilot
- Introduction
- Assess tenant readiness for a Microsoft Copilot rollout
- Exercise - Run and interpret the Microsoft Copilot readiness report
- Identify and resolve data readiness issues
- Exercise - Remediate an oversharing risk before rollout
- Plan a phased rollout across the organization
- Exercise - Stage a phased pilot rollout group
Configure Microsoft Copilot settings and extensibility
- Introduction
- Configure the Microsoft Copilot tenant-settings catalog
- Exercise - Configure the Microsoft Copilot settings catalog
- Manage web search for Microsoft Copilot and Microsoft Copilot Chat
- Manage Microsoft Copilot Cowork
- Configure Copilot Search
- Exercise - Configure web search and Copilot Search
- Manage third-party AI providers
- Exercise - Enable a third-party AI provider
- Configure Copilot connectors
- Govern SharePoint AI skills and the Frontier program
Establish agent identities and secure access with Microsoft Entra Agent ID
- Introduction
- Understand the Microsoft Entra Agent ID object model
- Assign a sponsor and a Microsoft Entra owner
- Exercise - Assign a sponsor and owner to an agent identity
- Automate sponsor transfer with Lifecycle Workflows
- Exercise - Configure a sponsor-transfer Lifecycle Workflow
- Apply Conditional Access to agent identities and choose the right license
- Exercise - Apply Conditional Access to an agent identity blueprint
Curate and control agents with the Agent Registry and Agent 365 tools
- Introduction
- Review, approve, and block tools for agents
- Exercise - Review requests and control tool availability
- Govern bring your own MCP servers
- Exercise - Review a bring your own model context protocol (MCP) server registration
- Perform ongoing Agent Registry curation
- Exercise - Reassign an active agent's owner
- Audit the agent estate by publisher and channel
Monitor and manage agents with Microsoft Agent 365
- Introduction
- Introduction to Microsoft Entra Agent ID
- Monitor and manage agents
- Scenario
- Exercise – Monitor agents from the overview page
- Exercise - Monitor agents inventory in registry
- Exercise - Monitor agents using the agent map
- Exercise - View agents with exceptions and take action
- Exercise - Measure agent effectiveness
- Exercise – Monitor connected platforms
Govern agents using Agent 365
- Introduction
- Govern agents scenarios
- Exercise – Set up agent settings and access
- Security and governance policies
- Exercise – Set up policy template
- Exercise – Set up permissions using access packages
- Exercise – Onboard an agent
- Exercise – Deploy and activate agents
- Exercise - Assign owners to agents to prevent agent sprawl
- Exercise - Block agents with security risks
- Exercise – Use rules and automate agent management
- Manage tools
- Exercise - Activate and manage tools
- View audit logs
Monitor and optimize Microsoft 365 AI services
- Introduction
- Pick the right report source for a Microsoft Copilot adoption question
- Exercise - Pick the right report source
- Read the Microsoft Copilot usage report and the Agent usage report
- Exercise - Read the Microsoft Copilot usage report and the Agent usage report
- Reconcile Microsoft Copilot and agent costs across surfaces
- Exercise - Reconcile Microsoft Copilot and agent costs across surfaces
- Optimize AI spend across Microsoft 365 AI services
- Assess AI-service health with the Copilot Control System

FAQ – AB-650T00: Administer Microsoft 365 and AI services

Hva koster kurset?
Prisen er 20 000 NOK for 3 dager.

Hvor lenge varer kurset?
Kurset går over 3 dager.

Hvordan gjennomføres kurset?
Kurset kombinerer faglig gjennomgang og praktiske øvelser knyttet til administrasjon, sikkerhet, governance og drift av Microsoft 365 og AI-tjenester.

Hvem passer kurset for?
Kurset passer for Microsoft 365-administratorer som skal konfigurere, sikre, overvåke og styre Microsoft 365-miljøer, Copilot og AI-agenter.

Microsoft 365 Administrators
IT-administratorer
Modern Workplace-administratorer
Tekniske konsulenter
IT-profesjonelle med ansvar for Microsoft 365, Copilot og AI-tjenester

Hvilke forkunnskaper kreves?
Deltakerne bør ha erfaring med administrasjon av Microsoft 365 workloads, inkludert Exchange Online, SharePoint, Microsoft Teams og OneDrive. Det kreves også kjennskap til Microsoft Entra ID, identitet og tilgangsstyring, cloud-baserte produktivitetstjenester, Microsoft Copilot og grunnleggende DNS-konsepter.

Hvilke forkunnskaper anbefales?
Det anbefales at du har grunnleggende PowerShell-kunnskap, kjennskap til Microsoft Graph PowerShell, Microsoft 365 security, compliance og governance, samt grunnleggende forståelse av Microsoft Defender for Office 365, Microsoft Purview, Conditional Access, privileged access management, AI-agenter og enterprise AI governance.

Hva lærer jeg i løpet av kurset?
Du lærer hvordan du administrerer Microsoft 365 og AI-tjenester på en sikker og kontrollert måte. Etter kurset vil du kunne:

Konfigurere og administrere Microsoft 365 tenants, domener og administrative roller
Administrere Microsoft 365- og AI-service-lisenser
Overvåke service health, connectivity, usage, adoption og kostnader
Administrere Exchange Online, Microsoft Teams, SharePoint og OneDrive
Styre SharePoint- og OneDrive-tilgang for trygg bruk av Microsoft Copilot
Administrere brukere, gjester, grupper og privileged roles i Microsoft Entra
Konfigurere authentication methods, SSPR, Password Protection og Conditional Access
Konfigurere Microsoft Defender for Office 365 threat protection
Implementere Microsoft Purview sensitivity labels, DLP og data lifecycle controls
Planlegge, konfigurere og overvåke Microsoft Copilot
Administrere og sikre AI-agent identities med Microsoft Entra Agent ID
Overvåke, styre og optimalisere AI-agenter med Microsoft Agent 365

Er kurset praktisk rettet?
Ja. Kurset inneholder praktiske øvelser innen tenant-administrasjon, lisensiering, Exchange Online, Teams, SharePoint, OneDrive, Microsoft Entra, Defender, Purview, Microsoft Copilot og Microsoft Agent 365.

Hvilke temaer dekkes i kurset?
Kurset dekker blant annet:

Microsoft 365 tenant management
Domener, branding, organisasjonsinnstillinger og administratorroller
Microsoft 365- og AI-service-lisensiering
Service health, backup, connectivity og adoption
Exchange Online, Microsoft Teams, SharePoint og OneDrive
SharePoint- og OneDrive-governance for Microsoft Copilot
Microsoft Entra ID, brukere, gjester, grupper og PIM
Authentication methods, SSPR og Conditional Access
Microsoft Defender for Office 365
Microsoft Purview, sensitivity labels, DLP og lifecycle management
Microsoft Copilot readiness, rollout og settings
Copilot Search, connectors, web search og extensibility
Microsoft Entra Agent ID
Agent Registry, MCP servers og Microsoft Agent 365
Agent governance, policies, audit logs, usage, kostnader og optimalisering

Forbereder kurset til sertifisering?
Ja. Kurset forbereder deg til sertifiseringen Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate.

Hva gjør dette kurset nyttig?
Kurset gir Microsoft 365-administratorer en helhetlig innføring i hvordan Microsoft 365, Copilot og AI-agenter kan administreres, sikres og styres i et enterprise-miljø. Det kombinerer tradisjonell Microsoft 365-administrasjon med moderne AI-governance, Copilot-adopsjon og agentadministrasjon.

Kan kurset leveres bedriftsinternt?
Ja. Kurset kan leveres både som åpent kurs og som bedriftsinternt kurs.

Microsoft 365 administration

Microsoft 365 Copilot & AI-agenter

Security, compliance & governance

Kursavgift:	20,000 NOK
Kurset inkluderer:	Digital course documentation and hands-on labs. Lunch and refreshments for in class events only
Timer	09.00-16.00
Varighet:	3 dager
Språk	English course documentation, English speaking instructor