Tel. 02-570-8449 Mobile 088-807-9770 Payment
Mon–Fri 9:00–17:00 @itgenius
IT Genius Institute
IT Genius Institute
CoursesWorkshopSchedule
For business
In-house trainingAI Transformation (TH)Government training (TH)Development servicesTraining room rental
Articles
About us
About IT GeniusInstructorsPortfolioOur clientsPayment methods
Contact usOnline
Theme
Language
THENLA
Ask about a coursePick whichever channel suits you
LINE @itgeniusFastest reply · Mon–Fri 9:00–17:00
Call us
02-570-8449Office088-807-9770Mobile
Email & social
contact@itgenius.co.thFor quotations and documentsFacebookitgeniusonlineYouTubeitgeniusengPlan training for your team
Home / Courses / Microsoft Tools / Detail
Microsoft Tools · MIC-77

Microsoft 365 Copilot and Agent Administration

Microsoft 365 Copilot and Agent Administration is a course in running Copilot and agents from the administrator's side, from licences, Entra ID and Purview sensitivity labels and DLP to reducing SharePoint oversharing and approving and monitoring agents, covering the skills measured in exam AB-900. It suits Microsoft 365 administrators and IT security teams.

Updated
Microsoft 365 Copilot and Agent Administration
From 6,750 THB / person 7,500 −10% excl. VAT 7% · group rates available
Corporate training quote See open rounds
PDFDownload the course outline
  • Duration12 hours · 2 days
  • FormatOnsite / live online
  • Next round9–10 Mar 27
  • CertificateIncluded

Course overview

When an organisation turns on Microsoft 365 Copilot and agents, one thing changes immediately: every file a user is allowed to open becomes material Copilot can draw on in its answers. If SharePoint and Teams permissions are shared too widely, if there are no sensitivity labels, or if nobody tracks who is creating which agents, confidential information can surface in answers for people who should never see it. Administrators therefore need to understand Microsoft 365 fundamentals, identity security, data protection and the administration of Copilot and agents together.

This course covers the skills measured in exam AB-900, Microsoft 365 Copilot and Agent Administration Fundamentals, following the latest outline on Microsoft Learn. It starts with the Microsoft 365 admin center, licences, and the Exchange, SharePoint and Teams admin centers, then covers Zero Trust, Microsoft Entra ID, Conditional Access and how Copilot reaches data through Microsoft Graph. It goes on to protecting data with Microsoft Purview, including sensitivity labels, DLP and DSPM for AI, tackling oversharing with SharePoint Advanced Management, and managing licences, usage, pay-as-you-go billing and the organisation's agents, before closing with a workshop on planning a safe rollout. The course helps with exam preparation, but learners book the exam with Microsoft themselves. (2 days, 6 hours per day, 12 hours in total, Beginner level.)

What you’ll gain

  • Explain the role of a Copilot and agent administrator and the skills outline of exam AB-900
  • Manage licences, users, groups and core objects in the Microsoft 365, Exchange, SharePoint and Teams admin centers
  • Understand Zero Trust, Microsoft Entra ID, Conditional Access and how to troubleshoot sign-in issues
  • Explain how Copilot reaches data through Microsoft Graph and each user's permissions
  • Use Microsoft Purview to protect data with sensitivity labels, retention, DLP and DSPM for AI
  • Detect and reduce oversharing in SharePoint before enabling Copilot
  • Manage Copilot licences, usage and costs, and control access to the organisation's agents

Who this course is for

  • Microsoft 365 administrators tasked with enabling and looking after Copilot
  • IT managers and IT security teams who need to govern data before AI is used across the organisation
  • Compliance and data governance staff who work with Microsoft Purview
  • Anyone preparing for exam AB-900, Microsoft 365 Copilot and Agent Administration Fundamentals

Prerequisites

  • Some experience with the Microsoft 365 admin center or managing users and licences
  • A basic understanding of Exchange Online, SharePoint and Teams as a user or administrator
  • Familiarity with MFA, user groups and basic file access permissions
  • A company test tenant or trial in which you have admin rights (if available)

Curriculum

Course Details

This course covers the skills measured in exam AB-900, Microsoft 365 Copilot and Agent Administration Fundamentals, following the latest outline on Microsoft Learn. It runs for 2 days, 6 hours per day (12 hours in total, 09:00-16:00), as lectures with labs at Beginner level. Learners use a company test tenant or a trial they set up themselves; features such as Microsoft 365 Copilot, premium Purview capabilities and SharePoint Advanced Management need separate licences, and the instructor demonstrates any topic learners cannot

access. The course helps with exam preparation but is not official Microsoft courseware; it does not include the exam fee or a voucher, and learners book the exam with Microsoft themselves. Unlike the Microsoft 365 Copilot and Copilot Studio course, which is for end users, and AI Agents with Copilot Studio, which focuses on building agents, this course is about administration. Learners take home a lab guide, a Copilot readiness checklist, a pilot plan template and a summary of the skills in the exam outline.

Day 1 Microsoft 365 Fundamentals, Security and the Data Copilot Sees

Section 1: Copilot, Agents and the Administrator's Role

  • How Microsoft 365 Copilot Chat differs from licensed Microsoft 365 Copilot
  • Copilot's built-in capabilities, prebuilt agents such as Researcher and Analyst, and custom agents
  • The administrator's job from readiness and enablement through to monitoring
  • The three skill areas of exam AB-900 and their weightings

Section 2: Lab: Microsoft 365 Admin Center and Licences

  • Explore org settings, domains and least-privilege admin roles
  • Licence types and how they affect the features users and groups can access
  • Manage mailboxes and distribution groups in the Exchange admin center
  • Lab: assign licences through a group and check the result on a test user

Section 3: Lab: SharePoint and Teams Admin Centers

  • Sites, libraries and folders and the SharePoint permission structure
  • Owner, member and visitor roles, and external sharing
  • Teams, channels and policies in the Teams admin center
  • Lab: create a test site and team with correct permissions

Section 4: Zero Trust and Microsoft 365 Security

  • Zero Trust principles: verify explicitly, use least privilege and assume breach
  • Authentication versus authorisation, and the available authentication methods
  • Threat protection and the capabilities of Microsoft Defender XDR
  • Read Identity Secure Score and decide what to fix first

Section 5: Lab: Microsoft Entra ID and Conditional Access

  • Users, groups, single sign-on and Conditional Access policies
  • Troubleshoot sign-in issues caused by MFA, Conditional Access and risky sign-ins
  • Privileged Identity Management, app registrations and enterprise applications
  • Lab: review sign-in logs and audit logs to trace user and admin activity

Section 6: How Copilot Accesses Data

  • Copilot uses Microsoft Graph and sees only the data each user is allowed to open
  • How controls in Microsoft 365, Purview and Defender reduce Copilot risk
  • Why oversharing is the top risk when Copilot is switched on
  • Responsible AI principles and telling users to check Copilot's answers
Day 2 Protecting Data, Governance and Managing Copilot and Agents

Section 7: Lab: Sensitivity Labels and Retention in Purview

  • Overview of Information Protection, Data Lifecycle Management and data classification
  • When to use sensitivity labels and how they affect what Copilot can do with a file
  • Find sensitive information with Data Explorer and review activity with Activity Explorer
  • Lab: create and publish a label, then test it on sample files

Section 8: Lab: DLP, Insider Risk and DSPM for AI

  • Read and respond to Data Loss Prevention alerts
  • Insider Risk Management, Communication Compliance and Compliance Manager
  • Discover AI activity with DSPM for AI and find files with Content Search in eDiscovery
  • Lab: create a DLP policy for sensitive data and review the results in DSPM for AI

Section 9: Lab: Tackling Oversharing in SharePoint

  • Tools for finding sites and files that are shared too widely
  • Run a data access governance report and interpret the results
  • SharePoint Advanced Management and restricted access control
  • Lab: restrict access to a site holding confidential data and verify with a test user

Section 10: Lab: Managing Copilot in the Organisation

  • Assign Copilot licences and choose which configurable features to enable or disable
  • Monthly licences versus pay-as-you-go, and setting up billing policies
  • Managing prompts that users save, share, schedule and delete
  • Lab: track usage with Copilot Analytics and build a report for management

Section 11: Lab: Controlling and Monitoring Agents

  • Decide which user groups can access and create which kinds of agents
  • Build a simple agent to understand what users can do, and the agent approval process
  • Monitor agent usage and lifecycle in the Microsoft 365 and Power Platform admin centers
  • Lab: approve a submitted agent and limit access to a pilot group

Section 12: Workshop: Rollout Plan and AB-900 Review

  • Readiness checklist before enabling: permissions, labels, DLP and oversharing
  • Workshop: plan a Copilot and agent pilot for your own organisation
  • Set usage metrics and AI guidelines for users
  • Review against the AB-900 outline and the Practice Assessment on Microsoft Learn

Schedule & training options

For individuals — public rounds

9–10March
Classroom9–10 Mar 27
20 seats left
1–2July
Classroom1–2 Jul 27
20 seats left

For organisations — in-house / private

  • Tailor the content to your team’s tools and projects
  • Your dates, at your office or live online
  • Quotation with tax ID for procurement
Corporate training quote

Instructors

Frequently asked questions

How does Microsoft 365 Copilot access an organisation's data?

Copilot retrieves information through Microsoft Graph, which connects an organisation's email, SharePoint and OneDrive files, Teams chats and calendars, and it only sees data the individual user can already access. Copilot does not grant anyone extra permissions, but if files are shared more widely than necessary, it can surface that content far more easily, so administrators need to review permissions and apply sensitivity labels before rollout.

What is oversharing in SharePoint, and how do you fix it before enabling Copilot?

Oversharing is when files or sites are accessible to more people than necessary, for example shared with everyone in the organisation or through links anyone can open. To fix it, use sharing reports to find risky sites and files, tighten permissions to only those who need access, apply sensitivity labels to important data and limit which sites Copilot can search during the pilot, then expand gradually.

What is the difference between sensitivity labels and DLP in Microsoft Purview?

A sensitivity label is a classification tag on a file, email or site, such as Public, Internal or Confidential, that applies protection such as encryption or restricted access, and it travels with the file even when moved elsewhere. DLP, or data loss prevention, is a policy that detects sensitive data such as national ID numbers and warns or blocks when it is shared or sent inappropriately. Used together, they control the data Copilot can reach.

Who is the Microsoft 365 Copilot and Agent Administration course for, and what should I know beforehand?

It suits Microsoft 365 administrators tasked with rolling out and managing Copilot, IT managers and IT security teams, compliance and data governance staff working with Microsoft Purview, and people preparing for the AB-900 exam. You should have some experience with the Microsoft 365 admin center or managing users and licences, a basic grasp of Exchange Online, SharePoint and Teams, and familiarity with MFA and file permissions.

What will I be able to do after the Microsoft 365 Copilot and Agent Administration course?

You will be able to manage licences, users and groups in the Microsoft 365 admin center, configure Entra ID and Conditional Access, explain how Copilot accesses data, protect information with Purview sensitivity labels, retention and DLP, reduce oversharing in SharePoint, and control and monitor your organisation's agents. Participants receive a Certificate of Completion with its own number that can be verified online, separate from the AB-900 exam.

What do I need for the Microsoft 365 Copilot and Agent Administration course, and is the exam included?

You should have an organisational test tenant or a trial account with administrator rights. Features such as Microsoft 365 Copilot, Purview Premium and SharePoint Advanced Management need separate licences, and topics you cannot access yourself are demonstrated. The course is not official Microsoft training, does not include an exam voucher, and you register for the exam yourself.

Related articles

Articles are published in Thai.