Category: Microsoft Certification

AB-900, AI, AI Governance, AI Strategy, Microsoft Certification June 27, 2026

Monitor Copilot usage and adoption, including Copilot Analytics and Microsoft 365 admin center (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Perform basic administrative tasks for Copilot
      --> Monitor Copilot usage and adoption, including Copilot Analytics and Microsoft 365 admin center

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Monitoring Microsoft 365 Copilot usage is a key administrative responsibility because it helps organizations understand adoption trends, measure business value, and identify areas where users may need additional training or enablement. Microsoft provides built-in visibility through the Microsoft 365 admin center and Copilot Analytics experiences, which together give insights into how Copilot is being used across apps like Word, Excel, Outlook, Teams, and SharePoint.

1. Why monitoring Copilot usage matters

Administrators monitor Copilot adoption to:

Measure return on investment (ROI) for Copilot licenses
Identify departments or users actively using Copilot
Detect underutilization or lack of adoption
Support training and change management initiatives
Ensure responsible and compliant use of AI tools
Inform licensing and capacity planning decisions

2. Copilot usage data in Microsoft 365 admin center

The Microsoft 365 admin center provides tenant-level reporting for Copilot usage.

Key capabilities include:

Usage reporting dashboards

Admins can view:

Number of licensed users
Active Copilot users over time
Usage trends across Microsoft 365 apps
App-specific usage (Word, Excel, Outlook, Teams)

Adoption insights

New vs returning users
Frequency of Copilot interactions
Organizational adoption trends

License-based visibility

Shows usage segmented by licensed users
Helps identify unused or underused licenses

Export capabilities

Data can be exported for deeper analysis in Power BI or Excel

3. Copilot Analytics (advanced insights)

Copilot Analytics provides deeper behavioral insights beyond basic usage metrics.

What Copilot Analytics helps you understand:

Business impact signals

Time saved (estimated productivity gains)
Task completion patterns using Copilot
Adoption maturity across teams

Engagement depth

Simple prompts vs advanced multi-step prompts
Frequency of Copilot-assisted document creation
Collaboration patterns influenced by Copilot

Department-level insights

Usage by business unit (e.g., Finance, HR, Sales)
Comparison between teams or regions

Trend analysis

Adoption growth over weeks/months
Seasonal or campaign-driven usage spikes

4. Key Copilot usage metrics to track

Administrators commonly focus on:

Active Copilot users (daily/weekly/monthly)
Copilot interactions per user
Prompt volume and complexity
Most-used Microsoft 365 apps with Copilot
Retention of Copilot usage over time

5. Microsoft 365 apps included in reporting

Copilot usage insights are typically broken down across:

Microsoft Word – document drafting, summarization
Microsoft Excel – data analysis, formula generation
Microsoft Outlook – email summarization and drafting
Microsoft Teams – meeting recap, chat summarization
SharePoint – content summarization and knowledge discovery

6. Administrative use cases for monitoring Copilot

Adoption planning

Identify early adopters to act as champions
Target training for low-adoption teams

Licensing optimization

Reclaim unused licenses
Forecast future licensing needs

Governance oversight

Ensure Copilot is used within acceptable use policies
Monitor for unusual or unexpected usage patterns

Organizational enablement

Measure effectiveness of Copilot rollout campaigns
Improve user enablement programs based on usage patterns

7. Relationship between admin center and Copilot Analytics

Capability	Microsoft 365 Admin Center	Copilot Analytics
Basic usage reporting	Yes	Limited
App-level usage breakdown	Yes	Yes
Behavioral insights	Limited	Yes
Productivity impact insights	No	Yes
Trend reporting	Yes	Yes (more advanced)

8. Key exam takeaway

For AB-900, understand that:

The Microsoft 365 admin center provides baseline usage and adoption reports.
Copilot Analytics provides deeper behavioral and productivity insights.
Together, they help administrators measure adoption, value, and readiness at scale.

Practice Exam Questions (10)

1.

An organization wants to view how many users are actively using Copilot in Microsoft Word and Outlook. Where should the administrator go first?

A. Microsoft Entra admin center
B. Microsoft 365 admin center
C. Microsoft Purview compliance portal
D. Microsoft Defender portal

Answer: B
Explanation: The Microsoft 365 admin center provides Copilot usage reports, including app-level adoption data such as Word and Outlook usage.

2.

Which Copilot Analytics capability provides insight into productivity improvements?

A. License assignment tracking
B. Email delivery monitoring
C. Estimated time saved by users
D. Device compliance reporting

Answer: C
Explanation: Copilot Analytics includes business impact metrics such as estimated time saved through AI-assisted work.

3.

What is a key benefit of combining Microsoft 365 admin center reports with Copilot Analytics?

A. It replaces the need for licensing
B. It enables deeper behavioral and adoption insights
C. It blocks unauthorized Copilot usage
D. It automates license purchasing

Answer: B
Explanation: The admin center provides usage data, while Copilot Analytics adds deeper behavioral and productivity insights.

4.

Which metric is MOST commonly used to measure Copilot adoption?

A. Number of inactive devices
B. Active Copilot users over time
C. Number of Teams channels created
D. Email attachment size

Answer: B
Explanation: Active users over time is a core adoption metric for Copilot usage tracking.

5.

An administrator wants to identify departments with the lowest Copilot usage. Which insight is most relevant?

A. Geographic IP logs
B. User mailbox size
C. Department-level usage reporting
D. DNS resolution reports

Answer: C
Explanation: Copilot Analytics can segment usage by department or business unit.

6.

What type of Copilot usage data is typically available in the Microsoft 365 admin center?

A. Advanced prompt sentiment analysis
B. Basic usage and adoption metrics
C. Source code execution logs
D. Endpoint vulnerability scans

Answer: B
Explanation: The admin center provides high-level usage and adoption metrics, not deep behavioral analysis.

7.

Which Copilot usage trend would indicate strong adoption?

A. Declining active users over time
B. Zero usage across all apps
C. Increasing active users across multiple apps
D. Only one department using Copilot

Answer: C
Explanation: Increasing usage across apps indicates growing adoption and engagement.

8.

Which Microsoft 365 apps are typically included in Copilot usage reporting?

A. Word, Excel, Outlook, Teams
B. SQL Server, Power BI Desktop, Visual Studio
C. Windows Explorer, Notepad, Paint
D. Azure VM, Azure Storage, Azure Functions

Answer: A
Explanation: Copilot usage reporting focuses on Microsoft 365 productivity apps.

9.

What is a common administrative action based on Copilot usage reports?

A. Disabling all user accounts
B. Reclaiming unused licenses
C. Deleting Teams channels
D. Blocking internet access

Answer: B
Explanation: Low usage can indicate unused licenses that may be reassigned or reclaimed.

10.

What does Copilot Analytics primarily provide beyond basic reporting?

A. Network firewall configuration
B. Behavioral and productivity insights
C. Hardware inventory tracking
D. Email encryption keys

Answer: B
Explanation: Copilot Analytics provides deeper insights into user behavior and productivity impact.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, AI Governance, Microsoft Certification June 27, 2026

Monitor and manage Copilot Pay-as-You-Go billing policies (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Perform basic administrative tasks for Copilot
      --> Monitor and manage Copilot Pay-as-You-Go billing policies

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Microsoft 365 Copilot pay-as-you-go (PAYG) billing policies allow organizations to consume Copilot-related services based on usage rather than only per-user licensing. This model is commonly used for features such as Copilot in SharePoint or other metered AI capabilities where consumption is tracked and billed through an Azure subscription.

Administrators are responsible for configuring, monitoring, and controlling these billing policies to ensure predictable costs, governance, and proper usage.

What is Copilot pay-as-you-go billing?

Pay-as-you-go billing in Microsoft 365 Copilot scenarios enables:

Usage-based billing instead of fixed per-user licensing
Cost tracking through Azure subscription meters
Flexible adoption for specific workloads (for example, SharePoint-based Copilot experiences)
Centralized financial control via Azure billing tools

This model is typically associated with Microsoft Copilot experiences that rely on Azure-backed metering.

Key components of PAYG billing policies

1. Azure subscription

All PAYG Copilot usage is billed through an Azure subscription. The subscription:

Acts as the billing container
Hosts cost management and usage tracking
Must be linked to the Microsoft 365 tenant

2. Billing policy configuration

Admins define policies that determine:

Which users or groups are enabled for PAYG usage
Which Copilot features are billable under PAYG
Scope of usage (tenant-wide, group-based, or service-specific)

3. Metered services

Pay-as-you-go applies to specific Copilot capabilities such as:

Copilot experiences in SharePoint
AI-powered content generation or summarization in supported workloads
Feature-specific AI consumption events

Each usage event contributes to measurable consumption units.

How administrators monitor PAYG Copilot usage

Azure Cost Management + Billing

Primary tool used to monitor consumption:

Tracks cost per service
Shows usage trends
Provides budget alerts and forecasting

Microsoft 365 admin center

Used for:

Viewing service-level Copilot usage
Monitoring adoption and activity reports
Understanding organizational usage patterns

Usage analytics dashboards

Administrators can review:

Active users consuming PAYG Copilot features
Feature-level consumption breakdown
Trends over time for optimization

Managing PAYG billing policies

1. Create or configure billing policies

Admins define policies to:

Enable PAYG for specific services (e.g., SharePoint Copilot)
Assign eligible user groups
Control feature access scope

2. Assign policies to users or groups

Instead of enabling all users, organizations often:

Assign PAYG access to pilot groups
Restrict usage to departments or projects
Expand gradually based on adoption

3. Set budgets and alerts

Using Azure Cost Management, administrators can:

Set monthly budgets
Configure alerts for threshold breaches
Prevent unexpected overuse

4. Review and optimize usage

Admins regularly:

Identify high-cost usage patterns
Adjust policies to reduce unnecessary consumption
Disable PAYG access for inactive users or groups

Governance and control considerations

Monitoring PAYG Copilot billing is not only financial—it also includes governance:

Ensuring only authorized users can consume metered services
Aligning usage with organizational policies
Applying Microsoft Entra ID group-based access controls
Ensuring compliance with Microsoft Purview policies where applicable

Key differences: PAYG vs per-user Copilot licensing

Model	Description
Per-user licensing	Fixed monthly cost per licensed user
Pay-as-you-go	Usage-based billing tied to Azure consumption

PAYG is typically more flexible but requires closer monitoring to avoid unexpected costs.

Summary

Monitoring and managing Copilot pay-as-you-go billing policies involves configuring Azure-based billing structures, assigning usage scopes through policies, and continuously tracking consumption using Azure Cost Management and Microsoft 365 reporting tools. Administrators must balance flexibility with cost control and governance to ensure efficient and compliant use of Copilot services.

Practice Exam Questions (10)

1.

Where is Copilot pay-as-you-go usage primarily billed?

A. Microsoft Teams admin center
B. Azure subscription
C. Windows Update service
D. Microsoft Defender portal

Answer: B
Explanation: PAYG Copilot usage is billed through an Azure subscription linked to the tenant.

2.

What is the main purpose of a Copilot pay-as-you-go billing policy?

A. To disable Copilot features globally
B. To assign static per-user licenses
C. To control and define usage-based billing scope
D. To store Copilot chat history

Answer: C
Explanation: Billing policies define who can use PAYG features and how usage is tracked.

3.

Which tool is primarily used to monitor PAYG Copilot costs?

A. Microsoft Word
B. Azure Cost Management + Billing
C. PowerPoint Designer
D. OneDrive sync client

Answer: B
Explanation: Azure Cost Management provides cost tracking, alerts, and reporting.

4.

What is a common use case for Copilot PAYG billing?

A. Permanent licensing for all employees
B. SharePoint-based Copilot experiences with metered usage
C. Offline document editing
D. Local file encryption

Answer: B
Explanation: PAYG is often used for metered Copilot features like SharePoint integration.

5.

What should an administrator configure to control which users can use PAYG Copilot features?

A. Microsoft Teams channels
B. Azure DevOps pipelines
C. Billing policies and assigned user groups
D. Windows Registry settings

Answer: C
Explanation: Policies and group assignments define access to PAYG usage.

6.

What is a key benefit of PAYG billing compared to per-user licensing?

A. Unlimited free usage
B. No need for Microsoft 365 accounts
C. Flexible, usage-based cost model
D. Automatic removal of security policies

Answer: C
Explanation: PAYG provides flexibility by charging based on actual usage.

7.

Which action helps prevent unexpected PAYG Copilot costs?

A. Disabling Microsoft Outlook
B. Setting Azure budgets and alerts
C. Removing all SharePoint sites
D. Turning off Microsoft Entra ID

Answer: B
Explanation: Budgeting and alerts help control spending.

8.

What type of identity is required for users consuming PAYG Copilot features?

A. Local Windows account only
B. Microsoft Entra ID identity
C. Anonymous guest browsing
D. External VPN identity only

Answer: B
Explanation: Copilot services require authenticated Microsoft Entra ID users.

9.

What should administrators regularly review in PAYG billing management?

A. Email signatures
B. Usage trends and cost reports
C. Device firmware versions
D. Printer configurations

Answer: B
Explanation: Usage and cost trends help optimize billing policies.

10.

Which statement best describes PAYG Copilot billing?

A. Fixed monthly cost per organization
B. Free usage for all Microsoft 365 users
C. One-time purchase for lifetime access
D. Consumption-based billing through Azure

Answer: D
Explanation: PAYG is based on measured usage and billed via Azure.

Go to the AB-900 Exam Prep Hub main page

AB-900, Microsoft Certification June 27, 2026June 27, 2026

Assign Copilot licenses (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Perform basic administrative tasks for Copilot
      --> Assign Copilot licenses

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Assigning Microsoft 365 Copilot licenses is a core administrative task that ensures users can access Copilot capabilities within supported Microsoft 365 apps. Licensing directly controls who can use Copilot features in apps such as Word, Excel, Outlook, Teams, and other Microsoft 365 services.

What is a Copilot license?

A Microsoft 365 Copilot license is a per-user add-on license that enables AI-powered assistance across Microsoft 365 applications. It works alongside required base licenses such as:

Microsoft 365 E3 or E5
Microsoft 365 Business Standard or Business Premium (depending on eligibility)

Without a Copilot license, users may still access Microsoft 365 apps but will not have Copilot capabilities embedded in those apps.

Prerequisites before assigning Copilot licenses

Before assigning licenses, an administrator must ensure:

The user has a supported Microsoft 365 base license
The organization has available Copilot licenses purchased through the Microsoft 365 admin center
The user is in a valid Microsoft Entra ID tenant
The required service plans for Copilot are enabled

Methods to assign Copilot licenses

1. Microsoft 365 admin center (most common method)

Admins can assign licenses manually:

Steps:

Navigate to the Microsoft 365 admin center
Go to Users > Active users
Select one or more users
Choose Licenses and apps
Enable Microsoft 365 Copilot
Save changes

This method is typically used for small or targeted assignments.

2. Group-based licensing via Microsoft Entra ID

For larger organizations, licenses are assigned through security groups:

Steps:

Create or select a Microsoft Entra security group
Assign Copilot license to the group
Add users to the group

Benefits:

Automated license assignment
Scalable for large organizations
Reduces administrative overhead

3. Microsoft 365 admin bulk assignment

Admins can:

Upload a CSV file of users
Assign Copilot licenses in bulk
Apply changes across many accounts at once

This is useful during onboarding or large-scale rollouts.

4. Microsoft Graph or PowerShell automation

Advanced administrators can use:

Microsoft Graph API
Microsoft Graph PowerShell SDK

This allows:

Automated provisioning
Integration with HR systems
Dynamic license assignment based on attributes

How Copilot licensing works across Microsoft 365 apps

Once assigned, the license enables Copilot features in:

Microsoft Word (content generation, rewriting, summarization)
Microsoft Excel (data analysis, formulas, insights)
Microsoft Outlook (email drafting and summarization)
Microsoft Teams (meeting summaries, chat assistance)
Microsoft Loop and other integrated apps

The license is tenant-aware and respects organizational data boundaries.

License assignment considerations

When assigning Copilot licenses, administrators should consider:

1. Data access permissions

Copilot does not grant new data access. It only uses what the user already has permission to view.

2. Cost and allocation strategy

Since Copilot is a premium add-on, organizations often:

Start with pilot groups
Expand based on usage metrics
Prioritize high-impact roles

3. Role-based rollout

Common rollout groups include:

Executives
Sales and marketing teams
Analysts and knowledge workers

Monitoring license usage

Admins can track:

Active Copilot users
License assignment status
Adoption metrics via Microsoft 365 admin center and usage reports

This helps optimize license distribution and ROI.

Common issues during license assignment

User lacks a required base Microsoft 365 license
Copilot service plan is not enabled
Delay in license propagation across services
User not signed out/in after assignment

Summary

Assigning Copilot licenses involves ensuring users have the correct Microsoft 365 base license, selecting an appropriate assignment method (manual, group-based, bulk, or automated), and monitoring adoption. Proper license management ensures controlled rollout, cost efficiency, and readiness for Copilot-enabled productivity across Microsoft 365 applications.

Practice Exam Questions (10)

1.

What is required before assigning a Microsoft 365 Copilot license to a user?

A. The user must have a Microsoft Teams phone system license
B. The user must have a supported Microsoft 365 base license
C. The user must be a global administrator
D. The user must install Copilot locally

Answer: B
Explanation: Copilot requires a base Microsoft 365 license such as E3 or E5.

2.

Which method is best for assigning Copilot licenses to a large group of users automatically?

A. Manual assignment in the admin center
B. CSV upload only
C. Group-based licensing in Microsoft Entra ID
D. Email-based activation requests

Answer: C
Explanation: Group-based licensing automates assignment at scale through Entra ID groups.

3.

Where can an administrator assign Copilot licenses directly to individual users?

A. Microsoft Defender portal
B. Microsoft 365 admin center
C. Azure DevOps
D. Power BI service

Answer: B
Explanation: User-level license assignment is performed in the Microsoft 365 admin center.

4.

What happens if a user does not have a Microsoft 365 Copilot license?

A. They lose access to Microsoft 365 apps entirely
B. They can still use apps but without Copilot features
C. They automatically receive a trial license
D. They can use Copilot through web search

Answer: B
Explanation: Copilot is an add-on; core apps still function without it.

5.

Which tool can be used for automated Copilot license assignment based on user attributes?

A. Microsoft Graph API
B. Microsoft Paint
C. Microsoft Forms only
D. SharePoint Designer

Answer: A
Explanation: Microsoft Graph enables automation and dynamic license management.

6.

What is a key benefit of group-based licensing?

A. It removes the need for Microsoft 365 licenses
B. It allows Copilot to bypass permissions
C. It enables scalable and automated license assignment
D. It disables admin control over users

Answer: C
Explanation: Group-based licensing simplifies large-scale management.

7.

Which of the following is NOT a valid method for assigning Copilot licenses?

A. Microsoft 365 admin center
B. Microsoft Entra group-based licensing
C. Bulk CSV upload
D. Direct assignment through Windows Registry edits

Answer: D
Explanation: Registry edits are not used for Microsoft 365 licensing.

8.

After assigning a Copilot license, what may users need to do?

A. Reinstall Microsoft 365 apps
B. Restart their device immediately
C. Sign out and sign back into Microsoft 365 apps
D. Change their password

Answer: C
Explanation: License changes often require sign-out/sign-in to take effect.

9.

What does a Copilot license enable in Microsoft 365 apps?

A. Access to encrypted storage only
B. AI-powered assistance features within supported apps
C. Additional storage space in OneDrive
D. Automatic data backup services

Answer: B
Explanation: Copilot provides AI assistance across Microsoft 365 apps.

10.

What is a recommended strategy when initially deploying Copilot licenses?

A. Assign to all users immediately
B. Disable Microsoft 365 security policies
C. Start with pilot groups before broad rollout
D. Assign only to guest users

Answer: C
Explanation: Pilot deployments help organizations manage cost and adoption effectively.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Generative AI, Microsoft Certification June 27, 2026

Identify use cases for custom agents (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Identify use cases for custom agents

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Custom agents in Microsoft 365 Copilot extend Copilot’s built-in capabilities by allowing organizations to create tailored AI assistants focused on specific business processes, data sources, and workflows. Unlike general Copilot experiences, custom agents are designed to operate within defined boundaries, grounded in organizational knowledge and governed data.

What are custom agents?

A custom agent is a specialized AI assistant built on top of Microsoft 365 Copilot that can:

Use organization-specific knowledge sources (SharePoint sites, files, Dataverse, web connectors, etc.)
Follow predefined instructions and behaviors
Perform scoped tasks such as answering domain questions, generating structured outputs, or assisting workflows
Operate with Microsoft 365 identity and security controls

They are typically built using tools like Copilot Studio and integrated into Microsoft 365 experiences such as Teams, SharePoint, or Copilot chat.

Key characteristics of custom agents

Custom agents differ from general Copilot usage in several important ways:

They are purpose-built, meaning they are designed for a specific function such as HR support or IT helpdesk assistance. They are also data-grounded, relying on selected enterprise knowledge sources rather than broad internet knowledge.

They are governed, meaning they respect Microsoft 365 permissions, Microsoft Purview policies, and organizational compliance boundaries.

Finally, they are interactive and task-oriented, often guiding users through structured processes rather than only responding to ad-hoc questions.

Common use cases for custom agents

1. HR and employee support agents

Custom HR agents are commonly used to:

Answer questions about leave policies, benefits, and onboarding
Guide employees through HR workflows
Retrieve policy documents from SharePoint or HR systems

This reduces HR ticket volume and improves employee self-service.

2. IT helpdesk and support agents

IT-focused agents can:

Troubleshoot common issues (password resets, device setup, VPN access)
Provide step-by-step remediation guidance
Surface knowledge base articles from internal documentation

These agents help reduce repetitive IT support requests.

3. Sales and customer support agents

Sales agents are used to:

Summarize customer accounts and opportunities
Retrieve CRM data and product information
Generate sales emails or proposals

Customer support agents can also respond to common inquiries using approved knowledge bases.

4. Knowledge management agents

Organizations use agents to:

Provide structured access to company policies and documentation
Answer questions across multiple SharePoint sites
Improve search and discovery of internal content

These agents are especially valuable in large enterprises with distributed knowledge.

5. Finance and operations agents

Custom agents in finance or operations can:

Assist with budget tracking queries
Explain financial reporting definitions
Summarize operational KPIs or dashboards

They typically connect to controlled datasets and reporting systems.

6. Project and workflow assistants

These agents help teams by:

Tracking project status updates
Summarizing meeting notes
Guiding users through standardized workflows (e.g., project intake, approvals)

When to use custom agents vs standard Copilot

Custom agents are most appropriate when:

A repeatable business process exists
The organization has curated knowledge sources
Responses must follow strict formatting or rules
Domain-specific accuracy is required (HR, finance, IT, legal)

Standard Copilot is better for:

General productivity tasks (writing, summarizing, brainstorming)
Ad hoc questions that do not require structured workflows or specialized data

Governance considerations

Custom agents inherit Microsoft 365 security and compliance controls, including:

Microsoft Entra ID authentication
Microsoft Purview sensitivity labels and DLP policies
Role-based access control (RBAC)
Data access restricted by user permissions

This ensures agents do not expose information beyond what a user is authorized to see.

Summary

Custom agents in Microsoft 365 Copilot are specialized AI assistants designed for targeted business scenarios. They extend Copilot by adding organizational knowledge, structured workflows, and governance controls. Their primary value lies in automating repetitive tasks, improving knowledge access, and supporting domain-specific processes across departments such as HR, IT, finance, and operations.

Practice Exam Questions (10)

1.

A company wants an assistant that can answer employee questions about vacation policies using only internal HR documents stored in SharePoint. What is the best solution?

A. Use a custom Copilot agent grounded in HR SharePoint content
B. Use Microsoft Excel Copilot only
C. Use a Power BI dashboard
D. Use a generic web Copilot chat

Answer: A
Explanation: A custom agent can be grounded in specific SharePoint HR content and provide controlled, policy-based responses.

2.

Which scenario best represents a use case for a custom agent?

A. Writing a marketing email from scratch
B. Generating creative ideas for a product name
C. Answering general trivia questions
D. Guiding users through an IT password reset workflow

Answer: D
Explanation: IT helpdesk workflows are structured, repeatable, and ideal for custom agents.

3.

What is a key benefit of using custom agents in Microsoft 365 Copilot?

A. They bypass Microsoft security controls for faster responses
B. They only use public internet data
C. They enforce organizational policies and use approved data sources
D. They eliminate the need for user authentication

Answer: C
Explanation: Custom agents respect Microsoft 365 governance and use controlled enterprise data.

4.

A finance team wants an AI tool that summarizes monthly budget reports stored in controlled datasets. Which capability is most appropriate?

A. Custom finance agent grounded in approved financial data
B. Personal Microsoft Word Copilot
C. Bing search integration
D. Email auto-responder rules

Answer: A
Explanation: Finance use cases require structured, governed access to internal datasets.

5.

Which tool is commonly used to create custom agents for Microsoft 365 Copilot?

A. Power Automate only
B. Copilot Studio
C. Azure DevOps
D. Microsoft Access

Answer: B
Explanation: Copilot Studio is used to build and configure custom agents.

6.

What distinguishes a custom agent from standard Microsoft 365 Copilot?

A. It can only work offline
B. It uses only unstructured internet data
C. It is built for specific business scenarios and uses curated data sources
D. It replaces all Microsoft 365 applications

Answer: C
Explanation: Custom agents are scoped to specific business needs and data sources.

7.

Which is a valid HR-related use case for a custom agent?

A. Generating random social media posts
B. Answering employee benefit questions from policy documents
C. Editing video content
D. Running system diagnostics on servers

Answer: B
Explanation: HR agents provide policy-based answers from controlled documentation.

8.

What ensures a custom agent does NOT expose unauthorized data?

A. Internet firewall rules
B. Microsoft Defender antivirus only
C. User identity and Microsoft 365 permissions
D. Manual approval of every prompt

Answer: C
Explanation: Access is controlled through Microsoft Entra ID and existing permissions.

9.

When should a custom agent be preferred over standard Copilot?

A. When tasks are ad hoc and creative
B. When structured workflows and specific business rules are required
C. When browsing public websites
D. When no data sources are needed

Answer: B
Explanation: Custom agents are ideal for structured, repeatable workflows.

10.

Which department would most likely benefit from a knowledge management agent?

A. HR requesting policy document access
B. Users playing games
C. Graphic design teams creating artwork
D. Hardware repair technicians fixing printers

Answer: A
Explanation: Knowledge management agents help retrieve and summarize internal policies and documentation.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Generative AI, Microsoft Certification June 27, 2026

Identify use cases for Analyst (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Identify use cases for Analyst

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Analyst is an advanced reasoning capability in the Microsoft 365 Copilot ecosystem that is designed to help users analyze structured data, identify trends, perform complex calculations, generate forecasts, and produce data-driven insights. Rather than simply summarizing information, Analyst works through data methodically, much like an experienced business analyst or data analyst.

While standard Microsoft 365 Copilot can answer questions, summarize documents, or create presentations, Analyst specializes in data analysis and quantitative reasoning. It can evaluate datasets, perform multi-step calculations, identify patterns, compare scenarios, and generate visualizations and recommendations based on the available data.

For the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals exam, you should understand:

What Analyst is
How Analyst differs from standard Microsoft 365 Copilot
Typical business scenarios where Analyst is valuable
The types of data Analyst can analyze
How Microsoft 365 permissions and governance apply
Best practices and limitations when using Analyst

What Is Analyst?

Analyst is an AI capability that focuses on turning data into actionable insights.

Typical tasks include:

Analyzing spreadsheets
Identifying trends
Comparing datasets
Creating summaries
Performing calculations
Producing forecasts
Detecting anomalies
Supporting business decisions

Instead of answering a single question, Analyst performs a structured analytical process to produce meaningful conclusions.

Example request:

“Analyze our quarterly sales data, identify the fastest-growing regions, explain why revenue declined in Q2, and forecast next quarter’s revenue.”

Rather than providing a brief response, Analyst may:

Examine multiple worksheets
Perform statistical calculations
Identify trends
Compare time periods
Detect unusual changes
Create charts
Generate a written business summary

How Analyst Differs from Standard Microsoft 365 Copilot

Standard Microsoft 365 Copilot focuses on everyday productivity tasks such as:

Drafting emails
Summarizing meetings
Creating presentations
Writing documents
Answering general questions

Analyst focuses on:

Data analysis
Statistical reasoning
Forecasting
Trend analysis
Scenario comparisons
Financial analysis
Business intelligence
Quantitative decision support

Think of standard Copilot as an AI assistant for productivity, while Analyst functions more like a business intelligence analyst or data analyst.

Data Sources Used by Analyst

Analyst can work with information stored across Microsoft 365, including:

Microsoft Excel workbooks
SharePoint document libraries
OneDrive files
Microsoft Teams shared files
CSV files
Tables
Financial reports
Business reports
Operational data
Microsoft Graph organizational context

Depending on the scenario, Analyst may combine structured business data with organizational context to provide richer insights.

Microsoft Graph and Analyst

Like other Microsoft 365 Copilot capabilities, Analyst uses Microsoft Graph to locate organizational data.

Microsoft Graph provides:

File locations
User permissions
Organizational relationships
Shared documents
Teams collaboration
SharePoint content
OneDrive files

Analyst only analyzes information the requesting user is authorized to access.

Common Business Use Cases

1. Sales Analysis

Sales managers can ask Analyst to:

Compare regional sales
Identify top-performing products
Analyze customer trends
Calculate revenue growth
Highlight underperforming markets

Example:

“Compare this year’s sales with last year and explain the largest changes.”

2. Financial Analysis

Finance teams can use Analyst to:

Analyze budgets
Compare expenses
Forecast revenue
Calculate profit margins
Identify cost drivers
Review spending patterns

3. Forecasting

Analyst can identify trends and generate forecasts such as:

Future sales
Inventory demand
Budget projections
Staffing needs
Customer growth

Forecasts help organizations plan future operations.

4. Trend Identification

Businesses often need to understand how metrics change over time.

Analyst can identify:

Seasonal trends
Growth patterns
Declining performance
Customer behavior
Revenue changes
Operational improvements

5. Executive Dashboards

Executives often receive large datasets.

Analyst can summarize:

Key performance indicators (KPIs)
Revenue
Profitability
Customer growth
Operational metrics
Performance against targets

Instead of reviewing hundreds of rows of data, leaders receive concise business insights.

6. Operational Analysis

Operations teams can analyze:

Manufacturing output
Service performance
Delivery times
Inventory levels
Workforce productivity
Supply chain efficiency

7. Human Resources Analytics

HR departments can analyze:

Employee turnover
Hiring trends
Training completion
Workforce demographics
Performance metrics
Recruiting pipelines

8. Marketing Performance

Marketing teams can evaluate:

Campaign effectiveness
Customer engagement
Website traffic
Conversion rates
Lead generation
Advertising performance

9. Risk Analysis

Organizations can identify:

Financial risks
Operational risks
Performance anomalies
Unexpected changes
Outliers in business data

Analyst helps prioritize issues requiring investigation.

10. Scenario Analysis

Analyst can compare multiple business scenarios.

Example:

“What happens if sales increase by 10% while operating expenses increase by 5%?”

Analyst performs the calculations and explains the business impact.

Types of Questions Analyst Can Answer

Examples include:

Which products are growing fastest?
Which departments exceeded budget?
What caused this month’s revenue decline?
Which customers generate the highest revenue?
Which regions are underperforming?
What trends appear over the past three years?
Which business unit has the highest operating costs?
Which employees completed required training?

Charts and Visualizations

Analyst may generate or recommend visualizations such as:

Bar charts
Line charts
Pie charts
Trend graphs
Comparison tables
KPI summaries

These help users understand complex datasets more quickly.

Security and Governance

Analyst follows the same Microsoft 365 security model as Microsoft 365 Copilot.

It respects:

Microsoft Graph permissions
SharePoint permissions
OneDrive permissions
Teams permissions
Microsoft Purview sensitivity labels
Data Loss Prevention (DLP) policies
Retention policies
Microsoft Defender protections

Analyst cannot analyze data that a user is not authorized to access.

Benefits of Analyst

Organizations benefit because Analyst can:

Reduce manual spreadsheet analysis
Improve decision-making
Accelerate reporting
Identify hidden trends
Detect anomalies quickly
Improve forecasting accuracy
Increase productivity
Support data-driven business decisions
Reduce repetitive analytical work

Limitations of Analyst

Although powerful, Analyst has limitations.

It:

Depends on the quality of the underlying data.
Cannot correct inaccurate source data automatically.
Cannot access restricted information.
Should not replace expert financial, legal, or scientific judgment.
May require users to validate calculations.
Cannot override Microsoft 365 permissions.
Cannot bypass Microsoft Purview protections.

Human review remains essential before making important business decisions.

Best Practices

Microsoft recommends that organizations:

Maintain clean, accurate datasets.
Store data in well-organized Microsoft 365 locations.
Apply Microsoft Purview sensitivity labels appropriately.
Use meaningful table names and column headers.
Ask clear, specific analytical questions.
Validate AI-generated calculations.
Review forecasts before implementing business decisions.
Monitor data quality regularly.
Ensure users have appropriate permissions.
Combine Analyst insights with human expertise.

Researcher vs. Analyst

Although both capabilities use advanced reasoning, they serve different purposes.

Feature	Researcher	Analyst
Primary purpose	Research and knowledge synthesis	Data analysis and quantitative reasoning
Main data types	Documents, emails, meetings, knowledge	Structured datasets, spreadsheets, reports
Typical output	Research reports	Analytical reports and business insights
Focus	Information gathering and synthesis	Calculations, trends, forecasting, analysis
Common users	Executives, project managers, researchers	Finance, sales, operations, business analysts

Exam Tips

For the AB-900 exam, remember these key points:

Analyst specializes in structured data analysis, calculations, forecasting, and trend identification.
It differs from Researcher, which focuses on knowledge discovery and multi-source research.
Analyst commonly works with Excel workbooks, reports, and business data.
It uses Microsoft Graph to locate organizational information.
It respects Microsoft 365 permissions and Microsoft Purview governance policies.
Analyst supports decision-making but does not replace human expertise.
Organizations should validate AI-generated analyses before acting on them.
Security, compliance, and permissions remain enforced throughout the analysis process.

10 Practice Exam Questions

Question 1

Which type of task is Analyst primarily designed to perform?

A. Configuring Microsoft Entra ID

B. Performing structured data analysis and generating business insights

C. Managing Microsoft Teams meetings

D. Assigning Microsoft 365 licenses

Correct Answer: B

Explanation: Analyst specializes in analyzing structured data, identifying trends, performing calculations, and producing data-driven insights.

Question 2

A finance manager wants to forecast next quarter’s revenue using historical sales data. Which Microsoft 365 Copilot capability is most appropriate?

A. Analyst

B. Microsoft Defender

C. SharePoint Advanced Management

D. Communication Compliance

Correct Answer: A

Explanation: Analyst is designed for forecasting, trend analysis, and financial modeling based on structured datasets.

Question 3

Which Microsoft technology helps Analyst locate organizational files and data while respecting permissions?

A. Microsoft Intune

B. Microsoft Defender

C. Microsoft Graph

D. Microsoft Sentinel

Correct Answer: C

Explanation: Microsoft Graph provides access to organizational relationships, files, and collaboration data while enforcing existing permissions.

Question 4

Which business scenario is the best use case for Analyst?

A. Writing a company newsletter

B. Comparing quarterly sales performance across regions

C. Creating a SharePoint site

D. Managing Exchange Online mailboxes

Correct Answer: B

Explanation: Analyst excels at comparing structured business data and identifying meaningful trends.

Question 5

What happens if a user does not have permission to access a financial spreadsheet?

A. Analyst requests administrator approval automatically.

B. Analyst bypasses permissions during analysis.

C. Analyst uses the spreadsheet but hides sensitive values.

D. Analyst cannot analyze the spreadsheet for that user.

Correct Answer: D

Explanation: Analyst respects Microsoft 365 permissions and cannot access data that the requesting user is not authorized to view.

Question 6

Which Microsoft Purview capability continues protecting sensitive data analyzed by Analyst?

A. Windows Hello

B. Device encryption

C. Sensitivity labels and Data Loss Prevention (DLP) policies

D. Microsoft Edge profiles

Correct Answer: C

Explanation: Microsoft Purview protections remain in effect whenever Analyst accesses organizational content.

Question 7

Which output would Analyst most likely generate?

A. A statistical summary showing sales trends and revenue forecasts

B. A new Microsoft 365 tenant

C. A user password reset

D. A SharePoint site template

Correct Answer: A

Explanation: Analyst produces analytical reports, calculations, forecasts, and business insights based on structured data.

Question 8

What is one limitation of Analyst?

A. It automatically corrects inaccurate source data.

B. It replaces professional financial judgment.

C. It ignores incomplete datasets.

D. It depends on the quality and completeness of the available data.

Correct Answer: D

Explanation: Analyst’s output is only as reliable as the underlying data and should be reviewed before making important decisions.

Question 9

Which statement best distinguishes Analyst from Researcher?

A. Analyst focuses on structured data analysis, while Researcher focuses on gathering and synthesizing information from multiple knowledge sources.

B. Analyst manages Microsoft 365 licenses, while Researcher manages permissions.

C. Analyst is used only in Microsoft Excel, while Researcher is used only in Microsoft Word.

D. Analyst replaces Microsoft Graph, while Researcher replaces Microsoft Purview.

Correct Answer: A

Explanation: Analyst specializes in quantitative analysis, whereas Researcher specializes in deep research and knowledge synthesis.

Question 10

Why should organizations validate Analyst-generated insights before making business decisions?

A. Analyst always produces incorrect calculations.

B. Analyst can modify the organization’s data automatically.

C. Human review is still necessary because AI-generated analyses should be verified before acting on them.

D. Analyst cannot generate forecasts.

Correct Answer: C

Explanation: Analyst is a powerful decision-support tool, but organizations should validate AI-generated analyses and recommendations using human expertise before making significant business decisions.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Generative AI, Microsoft Certification June 27, 2026

Identify use cases for Researcher (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Identify use cases for Researcher

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Researcher is an advanced AI-powered reasoning capability available within the Microsoft 365 Copilot ecosystem. It is designed to perform multi-step, in-depth research tasks that require gathering information from multiple sources, analyzing large amounts of data, synthesizing findings, and presenting comprehensive, well-organized results.

Unlike standard Copilot experiences, which typically generate responses from a single prompt, Researcher performs more sophisticated reasoning by combining enterprise knowledge stored in Microsoft 365 with, when appropriate and permitted, external information sources. It is intended to help users complete tasks that would normally require hours of manual research.

For the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals exam, you should understand:

What Researcher is
How it differs from standard Microsoft 365 Copilot experiences
Typical business scenarios where Researcher provides value
The types of data Researcher uses
How Microsoft 365 security, permissions, and governance continue to apply
The limitations and best practices for using Researcher

What Is Researcher?

Researcher is an advanced AI capability that helps users perform complex research tasks by:

Collecting information from multiple sources
Comparing information
Identifying patterns
Summarizing findings
Producing structured reports
Citing supporting information where applicable
Performing iterative reasoning before generating a final response

Rather than simply answering a question, Researcher can develop a complete research workflow.

Example request:

“Prepare a report comparing our organization’s cloud migration strategy with current industry best practices and identify potential risks.”

Instead of providing a brief summary, Researcher may:

Review internal project documentation
Examine meeting notes
Analyze SharePoint documents
Review emails
Compare current practices with publicly available information (when configured)
Produce a detailed report with recommendations

How Researcher Differs from Standard Copilot

Standard Microsoft 365 Copilot focuses primarily on helping users complete everyday productivity tasks such as:

Drafting emails
Summarizing meetings
Creating presentations
Rewriting documents
Generating tables
Answering questions

Researcher extends these capabilities by emphasizing:

Multi-step reasoning
Long-form research
Deep analysis
Information synthesis
Strategic recommendations
Comprehensive reporting

Think of standard Copilot as an AI assistant, while Researcher functions more like an AI research analyst.

Data Sources Used by Researcher

Researcher can analyze information from multiple Microsoft 365 sources, including:

SharePoint sites
OneDrive files
Microsoft Teams conversations
Outlook emails
Microsoft Word documents
Excel workbooks
PowerPoint presentations
OneNote notebooks
Microsoft Graph organizational relationships

Depending on organizational configuration and licensing, Researcher may also incorporate approved external information sources.

Microsoft Graph and Researcher

Researcher relies heavily on Microsoft Graph.

Microsoft Graph provides:

Organizational relationships
User permissions
File locations
Emails
Meetings
Calendar events
Conversations
Shared documents
Collaboration history

Researcher uses Microsoft Graph to locate relevant information efficiently.

Importantly, Researcher never bypasses Microsoft Graph permissions.

If a user cannot access a document, Researcher cannot use it.

Common Business Use Cases

1. Market Research

Researcher can help organizations:

Compare competitors
Analyze market trends
Summarize industry reports
Identify emerging technologies
Evaluate customer behavior

Example:

“Research the latest AI adoption trends in financial services.”

2. Executive Briefings

Executives often require concise summaries from large volumes of information.

Researcher can:

Summarize multiple meetings
Combine reports
Review emails
Produce executive-ready briefing documents

3. Project Research

Large projects often generate hundreds of documents.

Researcher can help summarize:

Requirements
Risks
Decisions
Milestones
Meeting notes
Design documents

Instead of reading dozens of files manually, Researcher consolidates the information.

4. Policy Analysis

Organizations frequently maintain hundreds of internal policies.

Researcher can:

Compare policies
Identify inconsistencies
Summarize requirements
Highlight missing documentation

5. Compliance Research

Researcher can assist with:

Reviewing compliance documentation
Summarizing regulatory guidance
Comparing policies against standards
Organizing compliance evidence

It does not replace formal compliance or legal reviews.

6. Sales Preparation

Sales teams can use Researcher to prepare for customer meetings by combining:

Previous emails
Meeting notes
Proposal documents
Customer presentations
Product documentation

The result is a comprehensive customer briefing.

7. Product Research

Product managers may ask Researcher to:

Compare product requirements
Analyze customer feedback
Summarize bug reports
Review feature requests
Recommend priorities

8. Knowledge Discovery

Employees often spend significant time searching for information.

Researcher can locate and combine information from:

Multiple SharePoint sites
Teams chats
Emails
Documents
Internal knowledge bases

This significantly reduces research time.

9. Strategic Planning

Leadership teams may ask Researcher to:

Compare business strategies
Analyze organizational performance
Review previous planning documents
Summarize lessons learned
Generate strategic recommendations

10. Report Generation

Researcher can generate:

Research reports
Project summaries
Risk analyses
Business cases
Recommendation documents
Decision-support reports

How Researcher Protects Organizational Data

Researcher follows the same Microsoft 365 security model as Microsoft 365 Copilot.

It respects:

Microsoft Graph permissions
SharePoint permissions
OneDrive permissions
Teams permissions
Microsoft Purview sensitivity labels
Data Loss Prevention (DLP) policies
Retention policies
Microsoft Defender protections

Researcher cannot retrieve information users are not authorized to access.

Benefits of Researcher

Organizations benefit because Researcher can:

Reduce manual research time
Improve decision-making
Consolidate information from multiple sources
Produce consistent reports
Improve knowledge discovery
Increase employee productivity
Reduce duplicate work
Accelerate project planning

Limitations of Researcher

Although powerful, Researcher has limitations.

It:

Only accesses authorized data.
Depends on data quality.
Cannot invent missing information.
May produce incomplete answers if source data is incomplete.
Does not replace human judgment.
Does not override organizational permissions.
Cannot bypass compliance policies.
Should not be considered a legal or regulatory authority.

Users should always review AI-generated conclusions before making important business decisions.

Best Practices

Microsoft recommends that organizations:

Ensure SharePoint permissions are accurate before deployment.
Apply Microsoft Purview sensitivity labels consistently.
Implement DLP policies.
Organize content with meaningful names and metadata.
Maintain high-quality documentation.
Encourage users to write specific research prompts.
Review AI-generated reports before distribution.
Train employees on responsible AI usage.
Monitor adoption and usage.
Continuously improve information governance.

Exam Tips

For the AB-900 exam, remember these key points:

Researcher is designed for complex, multi-step research tasks, not simple productivity tasks.
It uses Microsoft Graph to locate organizational information.
It respects all existing Microsoft 365 permissions.
Microsoft Purview policies continue to protect data.
Researcher can combine information from multiple Microsoft 365 services.
It supports report creation, analysis, and decision-making.
Human review remains important for critical decisions.
Researcher improves productivity but does not replace subject matter expertise.

10 Practice Exam Questions

Question 1

Which type of task is Researcher primarily designed to perform?

A. Multi-step research and analysis across multiple data sources

B. Installing Microsoft 365 applications

C. Managing user licenses

D. Configuring SharePoint permissions

Correct Answer: A

Explanation: Researcher is intended for advanced research, reasoning, and analysis that combines information from multiple sources into comprehensive results.

Question 2

How does Researcher locate relevant organizational content?

A. By ignoring file permissions

B. By using Microsoft Graph to identify accessible organizational data

C. By copying data into a separate database

D. By downloading every SharePoint site locally

Correct Answer: B

Explanation: Researcher relies on Microsoft Graph to discover relationships, files, emails, meetings, and other Microsoft 365 content while respecting user permissions.

Question 3

Which scenario is the best use case for Researcher?

A. Changing a user’s password

B. Assigning Microsoft 365 licenses

C. Comparing multiple project documents and generating a strategic summary

D. Creating a new SharePoint site

Correct Answer: C

Explanation: Researcher excels at analyzing multiple documents and producing synthesized reports or recommendations.

Question 4

Which Microsoft 365 security principle applies to Researcher?

A. Researcher automatically grants access to restricted documents.

B. Researcher temporarily elevates user permissions.

C. Researcher ignores sensitivity labels during analysis.

D. Researcher only accesses content the user is already authorized to view.

Correct Answer: D

Explanation: Researcher follows the same permission model as Microsoft 365 Copilot and cannot access unauthorized content.

Question 5

Which Microsoft technology provides the organizational relationships that Researcher uses?

A. Microsoft Defender

B. Microsoft Entra ID

C. Microsoft Graph

D. Microsoft Intune

Correct Answer: C

Explanation: Microsoft Graph connects users, files, meetings, emails, calendars, and collaboration data that Researcher uses during analysis.

Question 6

Which business activity is a common use case for Researcher?

A. Replacing Microsoft Purview

B. Producing executive briefing reports by combining information from multiple Microsoft 365 sources

C. Managing Azure subscriptions

D. Configuring firewall rules

Correct Answer: B

Explanation: Researcher can consolidate organizational information into executive-ready reports and summaries.

Question 7

What limits the information that Researcher can include in its responses?

A. Internet bandwidth only

B. Microsoft licensing costs only

C. The amount of SharePoint storage available

D. The user’s existing Microsoft 365 permissions and governance policies

Correct Answer: D

Explanation: Researcher can only use data that the requesting user is authorized to access, and it remains subject to governance controls.

Question 8

Which Microsoft Purview capability continues protecting organizational information when Researcher accesses documents?

A. Sensitivity labels and Data Loss Prevention (DLP) policies

B. Printer management

C. Windows Update

D. Device drivers

Correct Answer: A

Explanation: Microsoft Purview policies, including sensitivity labels and DLP, remain fully enforced when Researcher accesses organizational content.

Question 9

Why should users review Researcher-generated reports before acting on them?

A. Researcher cannot create reports.

B. AI-generated findings should be validated because human judgment is still required for important decisions.

C. Researcher always produces incorrect results.

D. Researcher automatically changes organizational data.

Correct Answer: B

Explanation: While Researcher can significantly accelerate analysis, users remain responsible for verifying conclusions and making informed decisions.

Question 10

Which statement best describes Researcher compared to standard Microsoft 365 Copilot?

A. Researcher replaces Microsoft Graph.

B. Researcher is only available in Microsoft Teams.

C. Researcher focuses on deep research, multi-step reasoning, and comprehensive analysis rather than routine productivity tasks.

D. Researcher only summarizes email messages.

Correct Answer: C

Explanation: Standard Copilot primarily assists with day-to-day productivity, whereas Researcher specializes in complex analysis, reasoning, and report generation.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Generative AI, Microsoft Certification June 27, 2026

Identify which Copilot features can be enabled or disabled (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Identify which Copilot features can be enabled or disabled

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

One of the primary responsibilities of a Microsoft 365 Copilot administrator is understanding which Copilot features can be controlled through administrative settings. Organizations often have different security, compliance, and business requirements, so Microsoft provides administrators with the ability to enable or disable various Copilot capabilities at the tenant, service, and user levels.

For the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals exam, you should understand:

Which Copilot capabilities administrators can control
Where these controls are configured
Why organizations may enable or disable specific features
Which capabilities are always governed by Microsoft 365 permissions rather than simple on/off settings
How licensing affects feature availability

Why Organizations Control Copilot Features

Organizations don’t always want every AI capability immediately available to every employee.

Common reasons include:

Meeting regulatory requirements
Protecting sensitive information
Conducting pilot deployments
Managing licensing costs
Limiting access to experimental features
Preventing users from accessing external AI services
Reducing organizational risk

Microsoft allows administrators to gradually introduce Copilot while maintaining governance.

Administrative Control Layers

Copilot features can be managed through several layers.

Control Layer	Purpose
Licensing	Determines who is entitled to use Copilot
Microsoft 365 Admin Center	Enables or disables Copilot services and manages user assignments
Microsoft Entra ID	Controls user and group access
Microsoft Purview	Applies compliance, DLP, retention, sensitivity labels, and governance
SharePoint Advanced Management	Controls content access and oversharing protection
Microsoft Defender	Protects against threats affecting Copilot-accessible content
Individual Microsoft 365 Apps	May provide application-specific Copilot settings

These controls work together rather than independently.

Features That Can Be Enabled or Disabled

Administrators can control several Copilot capabilities.

1. Microsoft 365 Copilot Licenses

The most fundamental control is license assignment.

Without a license:

Users cannot access Microsoft 365 Copilot.
Copilot chat within Microsoft 365 apps is unavailable.
AI-powered productivity experiences remain disabled.

Administrators assign or remove licenses through the Microsoft 365 Admin Center.

2. Copilot Chat Availability

Organizations can choose whether users have access to:

Microsoft 365 Copilot Chat
Enterprise data grounding
AI conversations within Microsoft 365

This allows phased deployments.

Example:

IT department enabled
Executive team enabled
Finance enabled later
Entire organization enabled after testing

3. Copilot in Individual Microsoft 365 Apps

Copilot experiences exist across multiple applications, including:

Word
Excel
PowerPoint
Outlook
Teams
OneNote

Organizations may decide when to introduce Copilot features within these workloads depending on readiness and licensing.

4. Intelligent Meeting Features

Some Teams AI features can be managed by administrators, including:

Intelligent meeting recap
AI-generated meeting summaries
Suggested action items
Meeting notes
Transcript availability

Organizations handling confidential meetings may choose to limit some AI-generated meeting experiences.

5. Plugins and Connectors

Administrators can manage:

Microsoft Graph connectors
Third-party plugins
Custom connectors
Agent access to external systems

Disabling unnecessary plugins reduces security risk.

6. Copilot Agents

Administrators can control:

Which agents are available
Who can create agents
Who can publish agents
Which departments can access specific agents

For example:

Human Resources might publish an HR Benefits Agent while Finance publishes an Expense Policy Agent.

7. Web Grounding

Some Copilot experiences include information from:

Microsoft Graph
Public web content
Organizational content

Organizations may configure which experiences are available depending on licensing and organizational policies.

Features That Cannot Simply Be “Turned Off”

Some Copilot behaviors are governed by Microsoft 365 security rather than feature switches.

Examples include:

Microsoft Graph Permissions

Copilot never ignores permissions.

If a user lacks permission to a file:

Copilot cannot retrieve it.
There is no setting that overrides SharePoint permissions.

SharePoint Permissions

Copilot always honors:

Site permissions
Folder permissions
File permissions
Restricted SharePoint sites

Administrators manage access by changing SharePoint permissions—not Copilot settings.

Microsoft Purview Policies

If Microsoft Purview blocks data through:

Sensitivity labels
DLP policies
Retention policies

Copilot follows those controls automatically.

Microsoft Defender Policies

Security policies continue protecting data regardless of Copilot.

Examples include:

Safe Links
Safe Attachments
Threat protection
Malware detection

Copilot cannot bypass Defender protections.

Enabling Copilot Through Licensing

Most Copilot functionality depends on licensing.

Typical process:

Purchase licenses.
Assign licenses.
Configure organizational settings.
Enable users or groups.
Monitor adoption.
Expand deployment gradually.

Removing the license immediately removes access.

Feature Rollout Strategies

Many organizations deploy Copilot in phases.

Example rollout:

Phase	Users
Pilot	IT department
Early adopters	Business champions
Department rollout	HR, Finance, Sales
Enterprise rollout	Entire organization

This minimizes disruption and allows administrators to gather feedback.

Feature Controls for Copilot Agents

Agent administrators can typically control:

Agent publishing
Agent availability
Knowledge sources
Connector permissions
Agent sharing
Agent lifecycle
Agent retirement

These settings help prevent unauthorized AI experiences.

Managing Experimental Features

Microsoft periodically releases:

Preview capabilities
Experimental AI experiences
Early-access functionality

Organizations can often choose whether these features are available.

Many enterprises disable preview features until internal testing is complete.

Monitoring Enabled Features

Administrators should monitor:

License assignments
Usage reports
Adoption metrics
Agent activity
Security alerts
Compliance reports
AI interactions (where supported)

Monitoring helps determine whether enabled features are providing value while remaining compliant.

Best Practices

Microsoft recommends:

Start with a pilot group.
Assign licenses only to intended users.
Review SharePoint permissions before deployment.
Apply Microsoft Purview protection policies first.
Enable only required plugins.
Monitor adoption regularly.
Review security settings before enabling new AI capabilities.
Use least-privilege access.
Periodically review agent permissions.
Train users before broad rollout.

Exam Tips

For the AB-900 exam, remember these key points:

Licensing is the primary method of enabling Microsoft 365 Copilot.
Administrators can enable or disable access for users and groups.
Copilot always respects Microsoft Graph permissions.
Microsoft Purview protections continue to apply to Copilot.
SharePoint permissions cannot be bypassed by Copilot.
Administrators can manage plugins, connectors, and agents.
Many organizations use phased deployments.
Security and governance controls remain in effect regardless of Copilot features.

10 Practice Exam Questions

Question 1

What is the primary requirement for a user to access Microsoft 365 Copilot?

A. Membership in the Global Readers group

B. Assignment of an appropriate Microsoft 365 Copilot license

C. Creation of a Copilot agent

D. A Microsoft Teams Premium license

Correct Answer: B

Explanation: A Microsoft 365 Copilot license is required before users can access Copilot experiences.

Question 2

An administrator wants to introduce Copilot to only the IT department before rolling it out company-wide. What is the recommended approach?

A. Disable Microsoft Graph

B. Remove SharePoint permissions

C. Assign Copilot licenses only to the IT department

D. Create separate Microsoft 365 tenants

Correct Answer: C

Explanation: Administrators commonly pilot Copilot by assigning licenses only to selected users or groups.

Question 3

Which security principle does Microsoft 365 Copilot always follow?

A. It ignores file permissions for administrators.

B. It grants temporary access to files during conversations.

C. It respects existing Microsoft Graph and Microsoft 365 permissions.

D. It automatically shares documents across departments.

Correct Answer: C

Explanation: Copilot only accesses content the user already has permission to view.

Question 4

Which capability can administrators commonly control?

A. Whether users can access Copilot agents

B. Whether Copilot can ignore sensitivity labels

C. Whether Microsoft Graph indexes SharePoint

D. Whether SharePoint stores documents

Correct Answer: A

Explanation: Administrators can manage agent availability, publication, and access permissions.

Question 5

What happens if a user’s Microsoft 365 Copilot license is removed?

A. Existing AI conversations become public.

B. SharePoint permissions are deleted.

C. Copilot access is removed from that user.

D. Microsoft Graph stops indexing organizational content.

Correct Answer: C

Explanation: Removing the Copilot license removes the user’s entitlement to Copilot services.

Question 6

Which Microsoft technology automatically continues enforcing sensitivity labels when users work with Copilot?

A. Microsoft Defender for Endpoint

B. Microsoft Purview

C. Microsoft Intune

D. Microsoft Planner

Correct Answer: B

Explanation: Microsoft Purview applies data protection controls, including sensitivity labels, regardless of whether Copilot is used.

Question 7

Why might an organization disable certain Copilot plugins?

A. To reduce security risks from unnecessary external integrations

B. To increase Microsoft Graph indexing speed

C. To improve Outlook mailbox quotas

D. To eliminate SharePoint storage limits

Correct Answer: A

Explanation: Limiting plugins reduces the organization’s attack surface and helps maintain governance.

Question 8

Which feature continues protecting documents even after Copilot is enabled?

A. Microsoft Graph indexing

B. Microsoft Purview DLP policies

C. Copilot prompts

D. AI-generated summaries

Correct Answer: B

Explanation: Data Loss Prevention policies remain fully enforced when Copilot accesses organizational data.

Question 9

What is a common best practice when deploying Microsoft 365 Copilot?

A. Enable every Copilot feature for all employees immediately.

B. Remove SharePoint permissions before deployment.

C. Begin with a pilot deployment and expand gradually.

D. Disable Microsoft Purview during rollout.

Correct Answer: C

Explanation: A phased rollout allows administrators to validate security, governance, and user adoption before organization-wide deployment.

Question 10

Which statement about SharePoint permissions and Copilot is correct?

A. Copilot can temporarily bypass SharePoint permissions.

B. Copilot automatically grants access to related files.

C. Administrators can disable SharePoint permissions while keeping Copilot enabled.

D. Copilot only accesses SharePoint content the user is already authorized to view.

Correct Answer: D

Explanation: Copilot always honors existing SharePoint permissions and cannot access content beyond the user’s authorized access.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Generative AI, Microsoft Certification June 27, 2026

Compare Copilot monthly license model to Pay-as-You-Go, including SharePoint (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Compare Copilot monthly license model to Pay-as-You-Go, including SharePoint

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Microsoft offers multiple licensing models for AI experiences across Microsoft 365. Understanding these licensing options is important for administrators who plan deployments, manage costs, and determine which AI capabilities are available to users.

For the AB-900 exam, you should understand the differences between:

Microsoft 365 Copilot monthly user licensing
Pay-as-you-go (consumption-based) licensing
SharePoint Copilot licensing
When each licensing model is appropriate

The exam focuses on understanding the concepts rather than memorizing pricing.

Why Multiple Licensing Models Exist

Organizations vary greatly in how employees use AI.

Some organizations:

Have employees who use AI all day.
Need AI integrated into Microsoft 365 apps.
Require predictable monthly costs.

Other organizations:

Use AI occasionally.
Need specialized agents.
Want to pay only when AI is used.

Microsoft therefore offers both subscription-based and consumption-based licensing.

Microsoft 365 Copilot Monthly License Model

The traditional Microsoft 365 Copilot license is assigned to individual users.

Each licensed user receives access to Copilot experiences across supported Microsoft 365 applications.

Examples include:

Word
Excel
PowerPoint
Outlook
Teams
OneNote
Microsoft 365 Chat

The license is:

Assigned per user
Monthly subscription
Predictable recurring cost

Characteristics of the Monthly License

The monthly model provides:

Full Microsoft 365 Copilot experience
Unlimited daily usage (subject to service limits)
Personalized AI assistance
Microsoft Graph integration
Cross-app experiences
Enterprise security and compliance

This model is best for employees who regularly use Copilot throughout their workday.

Typical Monthly License Scenario

A financial analyst uses Copilot every day to:

Analyze Excel workbooks
Draft reports
Summarize meetings
Create PowerPoint presentations
Search organizational knowledge

Because AI is used continuously, a monthly license provides predictable costs.

Benefits of Monthly Licensing

Advantages include:

Predictable budgeting
No need to monitor consumption
Continuous access
Simplified administration
Consistent user experience
Ideal for heavy users

Limitations of Monthly Licensing

Considerations include:

Fixed monthly cost regardless of usage
Not ideal for occasional users
Every user requires their own license
Organizations may over-license infrequent users

Pay-as-You-Go Licensing

Pay-as-you-go (PAYG) is a consumption-based licensing model.

Instead of paying for every user every month, organizations pay based on actual AI usage.

Think of it similarly to cloud computing services:

More usage = higher cost
Less usage = lower cost

Characteristics of Pay-as-You-Go

Pay-as-you-go provides:

Usage-based billing
Flexible scaling
No requirement for every user to have a monthly Copilot license
Cost based on AI requests or service consumption (depending on the service)

This model is especially useful for agents and certain AI scenarios.

Benefits of Pay-as-You-Go

Advantages include:

Lower upfront costs
Pay only for actual usage
Flexible deployment
Easy experimentation
Ideal for seasonal workloads
Good for occasional users

Limitations of Pay-as-You-Go

Potential drawbacks include:

Variable monthly costs
Budget forecasting is more difficult
Requires monitoring usage
Heavy usage may become more expensive than subscription licensing

Comparing Monthly Licensing and Pay-as-You-Go

Monthly License	Pay-as-You-Go
Fixed monthly cost	Usage-based cost
Licensed per user	Consumption-based
Predictable budgeting	Variable spending
Best for daily users	Best for occasional use
Continuous Copilot access	Pay only when AI is used
Simpler cost management	Requires usage monitoring

Microsoft 365 Copilot Chat

Organizations should understand that Microsoft offers AI experiences beyond the traditional monthly Copilot license.

For example:

Microsoft 365 Copilot Chat is available to Microsoft 365 users.
Organizations can extend Copilot Chat with agents.
Some agent usage can be billed using pay-as-you-go licensing rather than requiring every user to have a full Copilot subscription.

This provides flexibility for organizations with mixed AI usage patterns.

SharePoint and Copilot

SharePoint includes AI capabilities that help users work with documents, sites, and organizational knowledge.

Examples include:

Summarizing documents
Answering questions about files
Generating page content
Assisting with document creation
Improving knowledge discovery

SharePoint Agents

One important capability is SharePoint agents.

A SharePoint agent can:

Be created from a SharePoint site or document library
Answer questions using approved SharePoint content
Help users locate organizational knowledge
Reduce the need to manually search documents

For example:

A Human Resources SharePoint site may contain:

Employee handbook
Benefits guide
Leave policies
Training documents

An HR SharePoint agent can answer employee questions using those documents.

SharePoint Pay-as-You-Go

Organizations can use SharePoint agents without assigning every user a full Microsoft 365 Copilot license.

Instead, administrators can configure consumption-based billing.

Benefits include:

Lower cost for occasional users
Easy pilot deployments
Department-specific AI
Flexible scaling

This makes SharePoint agents attractive for organizations wanting targeted AI experiences without licensing every employee.

Choosing the Right Licensing Model

Choose Monthly Licensing When

Employees use Copilot every day.
AI is integrated into daily workflows.
Predictable monthly budgeting is important.
Users need full Copilot functionality across Microsoft 365.

Examples:

Executives
Project managers
Analysts
Consultants
Sales professionals
Knowledge workers

Choose Pay-as-You-Go When

AI usage is occasional.
Organizations are testing AI.
Departments need specialized agents.
Seasonal usage is expected.
Budget flexibility is acceptable.

Examples:

HR help desk agent
Legal document agent
IT support chatbot
SharePoint knowledge assistant

Administrative Considerations

Administrators should evaluate:

Expected AI usage
Number of users
Cost predictability
Department requirements
Governance policies
Licensing strategy
Agent deployment plans

Security Remains the Same

Regardless of licensing model:

Microsoft Entra ID authentication is used.
Microsoft Graph permissions are enforced.
Microsoft Purview policies apply.
Data Loss Prevention (DLP) policies remain active.
Sensitivity labels continue protecting content.
Microsoft Defender protections remain in effect.

Licensing changes how organizations pay for AI—not how Microsoft secures organizational data.

Best Practices

Microsoft recommends that organizations:

License frequent users with Microsoft 365 Copilot subscriptions.
Use pay-as-you-go for occasional AI usage.
Monitor AI adoption and consumption.
Start with pilot deployments.
Evaluate SharePoint agents for departmental knowledge scenarios.
Review licensing regularly as adoption increases.

Exam Tips

For the AB-900 exam, remember these key points:

Microsoft 365 Copilot is commonly licensed per user with a monthly subscription.
Pay-as-you-go bills organizations based on AI usage.
Monthly licensing provides predictable costs.
Pay-as-you-go offers flexibility for occasional or specialized AI use.
SharePoint agents can be deployed using consumption-based licensing in supported scenarios.
Licensing affects billing—not security or permissions.
Microsoft Graph, Microsoft Purview, and Microsoft Entra ID protections apply regardless of licensing model.
Heavy AI users are generally better suited to monthly licensing.
Departmental or pilot AI deployments often benefit from pay-as-you-go.

Practice Exam Questions

Question 1

Which licensing model provides users with a predictable monthly cost for Microsoft 365 Copilot?

A. Pay-as-you-go
B. Monthly per-user license
C. Azure consumption credits
D. SharePoint storage licensing

Correct Answer: B

Explanation: A monthly per-user license provides continuous access to Microsoft 365 Copilot for a fixed monthly subscription.

Question 2

What is the primary advantage of the pay-as-you-go licensing model?

A. Users receive unlimited AI usage regardless of activity.
B. Organizations pay only for actual AI usage.
C. Every employee automatically receives Microsoft 365 Copilot.
D. It disables Microsoft Graph integration.

Correct Answer: B

Explanation: Pay-as-you-go charges based on consumption, making it suitable for occasional or specialized AI usage.

Question 3

Which type of user is generally the best candidate for a Microsoft 365 Copilot monthly license?

A. An employee who rarely uses Microsoft 365 applications
B. A seasonal contractor who accesses AI once a month
C. A knowledge worker who uses Copilot throughout the workday
D. A visitor with guest access to SharePoint

Correct Answer: C

Explanation: Heavy or daily users benefit from the predictable costs and continuous access provided by the monthly licensing model.

Question 4

An organization wants to deploy an HR SharePoint agent that employees will use occasionally. Which licensing model is often the better fit?

A. Monthly Copilot license for every employee
B. Windows Enterprise licensing
C. Exchange Online licensing
D. Pay-as-you-go

Correct Answer: D

Explanation: Pay-as-you-go is well suited for departmental agents with occasional usage, allowing organizations to pay based on consumption.

Question 5

Which statement about Microsoft 365 Copilot monthly licensing is correct?

A. It charges only when AI is used.
B. It is assigned to individual users as a subscription.
C. It replaces Microsoft Entra ID.
D. It is available only for SharePoint.

Correct Answer: B

Explanation: The traditional Microsoft 365 Copilot model is licensed per user through a recurring subscription.

Question 6

Which capability is commonly associated with SharePoint agents?

A. Managing Windows updates
B. Replacing Microsoft Graph
C. Answering questions using SharePoint content and document libraries
D. Creating Azure virtual machines

Correct Answer: C

Explanation: SharePoint agents are grounded in SharePoint content and help users locate and understand organizational knowledge.

Question 7

How do Microsoft Purview policies behave when an organization switches from monthly licensing to pay-as-you-go?

A. They are automatically disabled.
B. They apply only to SharePoint documents.
C. They require users to purchase additional licenses before functioning.
D. They continue to protect data regardless of the licensing model.

Correct Answer: D

Explanation: Security and compliance controls such as Microsoft Purview continue to protect data regardless of how AI services are licensed.

Question 8

Which licensing model generally provides the most predictable monthly budgeting?

A. Pay-as-you-go
B. Monthly per-user licensing
C. Azure Reserved Instances
D. SharePoint storage quotas

Correct Answer: B

Explanation: Monthly licensing offers a fixed recurring cost, simplifying budgeting and financial planning.

Question 9

What is a potential disadvantage of pay-as-you-go licensing?

A. It cannot be used with agents.
B. It prevents users from accessing SharePoint.
C. Monthly costs may vary depending on AI usage.
D. It disables Microsoft Graph permissions.

Correct Answer: C

Explanation: Consumption-based billing means costs fluctuate according to actual usage, making budgeting less predictable.

Question 10

Which statement best summarizes the difference between Microsoft 365 Copilot monthly licensing and pay-as-you-go?

A. Monthly licensing is subscription-based, while pay-as-you-go is consumption-based.
B. Monthly licensing does not include Microsoft Graph.
C. Pay-as-you-go removes Microsoft Purview protections.
D. Monthly licensing is only available for SharePoint.

Correct Answer: A

Explanation: The fundamental difference is the billing model: monthly licensing charges a fixed subscription per user, whereas pay-as-you-go charges based on actual AI service consumption.

Go to the AB-900 Exam Prep Hub main page

AB-900, Agentic AI, AI, Microsoft Certification June 27, 2026June 27, 2026

Compare the built-in capabilities of Copilot and agents (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Perform basic administrative tasks for Copilot and agents (25–30%)
   --> Understand features and capabilities of Copilot and agents
      --> Compare the built-in capabilities of Copilot and agents

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

Microsoft 365 provides powerful AI capabilities through Microsoft 365 Copilot and agents. Although they are closely related, they serve different purposes.

A common misconception is that Copilot and agents are the same technology. In reality:

Microsoft 365 Copilot is the AI assistant that helps users work across Microsoft 365 applications.
Agents are specialized AI assistants designed to perform focused tasks, automate business processes, or provide expertise in specific domains.

Understanding the differences between Copilot and agents is an important objective on the AB-900 exam.

What is Microsoft 365 Copilot?

Microsoft 365 Copilot is Microsoft’s AI assistant integrated throughout Microsoft 365 applications.

It combines:

Large Language Models (LLMs)
Microsoft Graph
Microsoft 365 data
User permissions
Organizational knowledge

Copilot helps users complete everyday work faster while respecting existing security permissions.

Examples include:

Drafting emails
Summarizing meetings
Creating PowerPoint presentations
Analyzing Excel data
Writing Word documents
Answering natural language questions
Summarizing Teams chats

Copilot is designed to improve personal productivity across many different tasks.

What are Microsoft 365 Agents?

Agents are AI assistants created to perform specialized or repeatable business tasks.

Rather than serving as a general assistant, an agent focuses on a specific job.

Examples include:

HR policy assistant
IT help desk assistant
Sales proposal assistant
Customer service assistant
Legal document assistant
Procurement assistant
Finance assistant

Agents can:

Answer questions from approved knowledge sources
Follow business rules
Guide users through processes
Complete multi-step workflows
Connect to business systems

Comparing Copilot and Agents

Microsoft 365 Copilot	Microsoft 365 Agents
General-purpose AI assistant	Specialized AI assistant
Works across Microsoft 365	Focuses on a specific business task
Assists individual productivity	Assists business processes
Uses Microsoft Graph extensively	Can use Graph plus additional knowledge sources
Available in Microsoft 365 apps	Can be published inside Teams, Microsoft 365, SharePoint, and other experiences
Broad conversational abilities	Domain-specific expertise

Built-in Capabilities of Microsoft 365 Copilot

Copilot includes many built-in features without requiring customization.

Content Creation

Copilot can:

Draft documents
Rewrite text
Summarize documents
Change writing tone
Generate presentations
Create outlines
Brainstorm ideas

Example:

“Create a proposal for a new customer.”

Meeting Intelligence

Within Microsoft Teams, Copilot can:

Summarize meetings
Capture decisions
List action items
Answer questions about the meeting
Identify unresolved issues

Example:

“What decisions were made during yesterday’s meeting?”

Email Assistance

In Outlook, Copilot can:

Draft responses
Summarize long email threads
Suggest follow-up actions
Improve writing style

Data Analysis

Within Excel, Copilot can:

Explain formulas
Generate charts
Analyze trends
Identify outliers
Create summaries

Example:

“Show quarterly sales trends.”

Knowledge Discovery

Copilot searches organizational knowledge using Microsoft Graph.

It can answer questions such as:

“What projects am I working on?”
“Summarize documents related to Project Apollo.”
“What files has my manager recently shared?”

Cross-Application Context

One major capability is connecting information across applications.

Example:

Copilot may combine information from:

Outlook
Teams
Word
OneDrive
SharePoint
Calendar

to answer a single prompt.

Built-in Capabilities of Agents

Agents focus on completing specialized work.

Task-Specific Expertise

An agent is trained or configured around one topic.

Examples:

HR Agent

Vacation policy
Benefits
Employee handbook

IT Agent

Password reset guidance
Software installation
Device troubleshooting

Finance Agent

Expense reimbursement
Budget approval
Procurement rules

Business Process Guidance

Agents can walk users through business procedures.

Example:

Instead of simply answering a question, an HR onboarding agent can:

Explain required forms
Guide new employees
Answer benefits questions
Provide training links

Knowledge Grounding

Agents can use approved organizational knowledge.

Examples include:

SharePoint libraries
Internal documents
Knowledge bases
Business manuals
Policies
FAQs

Unlike general internet chatbots, agents only answer from approved sources.

Workflow Automation

Agents can perform multiple steps automatically.

Example:

A travel request agent might:

Collect travel details
Validate policy
Request manager approval
Submit the request
Notify the employee

Connectors

Agents can connect to external business systems.

Examples:

Dynamics 365
ServiceNow
Salesforce
SAP
Workday
Microsoft Dataverse

This allows agents to retrieve business information securely.

Consistent Business Responses

Unlike free-form conversations, agents provide consistent answers based on organizational knowledge.

This reduces confusion and improves compliance.

Shared Capabilities

Both Copilot and agents share many AI features.

These include:

Natural language interaction
Context-aware conversations
AI-generated responses
Respect for Microsoft Entra ID permissions
Security trimming
Microsoft Graph integration (where applicable)
Use of Large Language Models
Support for Microsoft 365 security and compliance controls

Key Differences

Scope

Copilot

Broad productivity assistant.

Agent

Focused business assistant.

Purpose

Copilot

Helps users complete work.

Agent

Helps complete specific business processes.

Knowledge

Copilot

Uses Microsoft Graph plus organizational content.

Agent

Uses selected knowledge sources chosen by administrators or creators.

Customization

Copilot

Little customization required.

Agents

Often customized for departments or business scenarios.

Reusability

Copilot

Same assistant for everyone (subject to permissions).

Agents

Different agents can exist for different teams.

Examples:

Legal Agent
Sales Agent
Finance Agent
HR Agent

Copilot vs. Agent Example

A user asks:

“I need to prepare for a customer renewal.”

Copilot might:

Summarize recent emails
Review meeting notes
Draft a proposal
Create a PowerPoint

A Sales Agent might:

Retrieve CRM information
Check renewal status
Calculate discounts
Recommend pricing
Generate renewal documentation

Both assist the user—but in different ways.

Security

Both Copilot and agents follow Microsoft security principles.

They respect:

Microsoft Entra ID authentication
User permissions
Microsoft Graph security trimming
Microsoft Purview sensitivity labels
Data Loss Prevention (DLP) policies
Conditional Access policies
Compliance controls

Neither Copilot nor agents expose information users are not authorized to access.

Common Exam Tips

Remember these distinctions:

Copilot is a general-purpose AI assistant.
Agents are specialized assistants for business scenarios.
Copilot improves productivity across Microsoft 365.
Agents automate or simplify specific business tasks.
Both use natural language.
Both respect existing Microsoft 365 permissions.
Agents can connect to external business systems.
Multiple agents can exist within the same organization.
Copilot does not replace business applications—it works with them.
Administrators govern both using Microsoft 365 security and compliance controls.

Practice Exam Questions

Question 1

What is the primary purpose of Microsoft 365 Copilot?

A. Replace business applications
B. Provide a general AI assistant across Microsoft 365 applications
C. Manage Microsoft Entra ID users
D. Automatically configure SharePoint permissions

Correct Answer: B

Explanation: Microsoft 365 Copilot is a general-purpose AI assistant that enhances productivity across Microsoft 365 applications.

Question 2

Which scenario is best suited for a Microsoft 365 agent?

A. Creating a PowerPoint presentation from meeting notes
B. Summarizing an Outlook inbox
C. Guiding employees through HR onboarding procedures
D. Drafting a Word document

Correct Answer: C

Explanation: Agents are designed for specialized business tasks such as HR onboarding, IT support, or finance workflows.

Question 3

Which feature is shared by both Microsoft 365 Copilot and agents?

A. They ignore Microsoft Entra permissions.
B. They require internet searches for every response.
C. They automatically grant file access.
D. They support natural language conversations.

Correct Answer: D

Explanation: Both Copilot and agents use conversational AI, allowing users to interact using natural language.

Question 4

Which capability is unique to many business agents?

A. Creating Word documents
B. Summarizing Teams meetings
C. Performing specialized workflows using business systems
D. Rewriting email messages

Correct Answer: C

Explanation: Agents can automate specialized business workflows and connect with enterprise systems.

Question 5

Microsoft 365 Copilot primarily retrieves organizational information through:

A. Microsoft Graph
B. Azure Virtual Desktop
C. Windows Registry
D. Local device storage

Correct Answer: A

Explanation: Microsoft Graph provides Copilot with secure access to organizational data while respecting user permissions.

Question 6

Which statement best describes Microsoft 365 agents?

A. They replace Microsoft Graph.
B. They are designed for focused business scenarios and specialized tasks.
C. They only answer questions about Microsoft products.
D. They are available only in Outlook.

Correct Answer: B

Explanation: Agents are purpose-built AI assistants that support specific business processes or departmental functions.

Question 7

How do Copilot and agents protect organizational data?

A. They bypass file permissions for administrators.
B. They make all SharePoint content searchable.
C. They respect existing Microsoft 365 permissions and compliance controls.
D. They permanently copy data into AI models.

Correct Answer: C

Explanation: Both solutions honor Microsoft Entra ID permissions, Microsoft Graph security trimming, and Microsoft Purview governance policies.

Question 8

Which task would Microsoft 365 Copilot most likely perform?

A. Reset a user’s Active Directory password automatically.
B. Analyze an Excel workbook and explain sales trends.
C. Replace the organization’s CRM system.
D. Configure Conditional Access policies.

Correct Answer: B

Explanation: Copilot excels at productivity tasks such as analyzing Excel data and generating insights.

Question 9

An organization creates separate HR, Legal, and Finance AI assistants. These are examples of:

A. Microsoft Graph connectors
B. SharePoint hubs
C. Copilot prompts
D. Specialized agents

Correct Answer: D

Explanation: Organizations can build multiple specialized agents tailored to different departments and business functions.

Question 10

What is one of the biggest differences between Microsoft 365 Copilot and agents?

A. Copilot is a broad productivity assistant, while agents focus on specific business tasks.
B. Agents do not use AI.
C. Copilot ignores Microsoft 365 permissions.
D. Agents cannot access organizational knowledge.

Correct Answer: A

Explanation: Copilot provides broad productivity assistance across Microsoft 365, whereas agents are designed for specialized business scenarios and targeted workflows.

Go to the AB-900 Exam Prep Hub main page

AB-900, AI Governance, AI Security, Data Governance, Data Security, Microsoft Certification June 27, 2026

Understand features and capabilities of SharePoint Advanced Management, including restricted site access (AB-900 Exam Prep)

This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Understand data protection and governance tasks for Microsoft 365 and Copilot (35–40%)
   --> Identify and monitor oversharing in SharePoint in Microsoft 365
      --> Understand features and capabilities of SharePoint Advanced Management, including restricted site access

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

As organizations increasingly rely on Microsoft 365, SharePoint Online, Microsoft Teams, and Microsoft 365 Copilot, protecting organizational data has become more important than ever. While collaboration is essential, unrestricted sharing can expose confidential information to unintended users.

To help organizations better govern SharePoint content, Microsoft offers SharePoint Advanced Management (SAM), a collection of advanced governance, reporting, security, and lifecycle management capabilities designed to improve the security of SharePoint and OneDrive environments.

One of its most important features is Restricted Site Access, which allows administrators to temporarily limit access to specific SharePoint sites that may contain highly sensitive or potentially overshared information.

For the AB-900 exam, you should understand the purpose of SharePoint Advanced Management, its major capabilities, and how Restricted Site Access helps reduce data exposure.

What is SharePoint Advanced Management?

SharePoint Advanced Management is a set of administrative capabilities that extends the standard SharePoint Online administration experience.

Its goals include:

Improving governance
Reducing oversharing
Enhancing visibility into permissions
Strengthening data protection
Supporting Microsoft 365 Copilot readiness
Helping organizations adopt Zero Trust security principles

Rather than replacing Microsoft Purview or Microsoft Defender, SharePoint Advanced Management complements these services by focusing specifically on SharePoint and OneDrive administration.

Why SharePoint Advanced Management Is Important

Organizations often have:

Thousands of SharePoint sites
Millions of documents
Numerous external users
Complex permission structures
Years of accumulated sharing links

As these environments grow, administrators face challenges such as:

Overshared files
Forgotten external sharing
Stale permissions
Sensitive documents accessible by too many users
Inactive or abandoned sites

SharePoint Advanced Management provides tools to identify and address these issues before they become security incidents.

Key Capabilities of SharePoint Advanced Management

SharePoint Advanced Management includes several capabilities designed to improve governance.

1. Data Access Governance Reporting

Administrators can:

Identify overshared sites
Review sharing activity
Analyze permission configurations
Discover external access
Locate high-risk collaboration sites

These reports provide visibility into who can access organizational content.

2. Site Lifecycle Management

Organizations frequently create project sites that remain active long after projects end.

SharePoint Advanced Management helps administrators:

Identify inactive sites
Review site ownership
Archive or delete unused sites
Reduce unnecessary content exposure

Proper lifecycle management reduces security risks while improving overall governance.

3. Oversharing Insights

Administrators can identify:

Sites shared broadly
Anonymous sharing links
Guest access
Sensitive sites with excessive permissions
Large-scale permission inheritance issues

These insights are particularly valuable before deploying Microsoft 365 Copilot.

4. Site Ownership Management

SharePoint sites require responsible owners.

Advanced Management helps administrators identify:

Sites without owners
Inactive owners
Ownership inconsistencies

Proper ownership improves accountability and ensures permissions are reviewed regularly.

5. Sharing Governance

Administrators can evaluate:

External sharing
Anonymous links
Organization-wide access
Sharing policies
Guest permissions

This helps organizations reduce unnecessary collaboration risks.

6. Restricted Site Access

One of the most important SharePoint Advanced Management capabilities is Restricted Site Access.

What is Restricted Site Access?

Restricted Site Access allows administrators to temporarily limit access to a SharePoint site.

When enabled:

Most users lose access to the site.
Only designated administrators or approved users can access the content.
Copilot and Microsoft Search continue to respect the updated permissions because they always honor Microsoft 365 security trimming.

This feature is useful when a site contains highly sensitive information or requires investigation.

Why Use Restricted Site Access?

Organizations may need to immediately reduce access when:

Sensitive information has been overshared.
A security investigation is underway.
Legal or regulatory reviews are occurring.
Confidential merger or acquisition documents are stored.
Human Resources investigations are active.
Executive leadership documents require additional protection.
Sensitive intellectual property is being reviewed.

Rather than deleting the site, administrators can quickly restrict access while remediation occurs.

How Restricted Site Access Works

The feature temporarily changes access behavior by allowing only explicitly authorized users to access the site.

Typical workflow:

Administrator identifies a high-risk site.
Restricted Site Access is enabled.
Only approved users retain access.
Administrators investigate permissions.
Oversharing issues are corrected.
Normal access is restored when appropriate.

Benefits of Restricted Site Access

Organizations gain several advantages:

Rapid Risk Reduction

Potential data exposure is reduced immediately.

Supports Investigations

Investigators can examine permissions without widespread user access.

Improves Governance

Administrators gain time to review sharing settings before reopening access.

Protects Sensitive Information

Highly confidential documents remain accessible only to authorized personnel.

Supports Compliance

Temporary restrictions can assist with legal, regulatory, or internal compliance reviews.

Relationship with Microsoft 365 Copilot

Microsoft 365 Copilot respects Microsoft 365 permissions.

If a site becomes restricted:

Copilot cannot retrieve information from that site for users who no longer have permission.
Microsoft Search also honors the updated permissions.
Other Microsoft 365 services continue using the same security model.

Restricted Site Access therefore reduces the likelihood that Copilot will surface sensitive content from that site.

Relationship with Microsoft Purview

SharePoint Advanced Management and Microsoft Purview work together.

Microsoft Purview focuses on:

Data classification
Sensitivity labels
Data Loss Prevention (DLP)
Insider Risk Management
Data Lifecycle Management
Compliance

SharePoint Advanced Management focuses on:

Site governance
Permissions
Oversharing
Site administration
Access analysis
Restricted Site Access

Together they provide comprehensive protection for Microsoft 365 data.

Relationship with Microsoft Defender

Microsoft Defender identifies threats such as:

Compromised accounts
Suspicious user activity
Malware
Phishing attacks

If Defender identifies suspicious activity involving a SharePoint site, administrators may choose to enable Restricted Site Access while investigating the incident.

Best Practices

Microsoft recommends the following practices:

Regularly review Data Access Governance reports.
Minimize broad “Everyone” permissions.
Review external sharing frequently.
Assign active site owners.
Archive inactive sites.
Apply sensitivity labels to sensitive content.
Use Restricted Site Access only when necessary.
Review restricted sites periodically and restore normal access when appropriate.
Combine SharePoint Advanced Management with Microsoft Purview and Microsoft Defender for layered protection.
Follow the principle of least privilege.

Exam Tips

Remember these key points for the AB-900 exam:

SharePoint Advanced Management focuses on governance and security for SharePoint and OneDrive.
It helps identify and remediate oversharing.
Restricted Site Access temporarily limits access to sensitive SharePoint sites.
Copilot always respects SharePoint permissions, including restricted sites.
Restricted Site Access is useful during investigations or when sensitive information has been overshared.
SharePoint Advanced Management complements Microsoft Purview rather than replacing it.
Proper site ownership and lifecycle management reduce long-term security risks.

Practice Exam Questions

Question 1

Which primary problem does SharePoint Advanced Management help organizations address?

A. Windows operating system updates

B. Oversharing and governance of SharePoint content

C. SQL Server performance tuning

D. Microsoft Teams meeting scheduling

Correct Answer: B

Explanation: SharePoint Advanced Management provides governance tools that help identify oversharing, manage permissions, and improve the security of SharePoint and OneDrive environments.

Question 2

What is the purpose of Restricted Site Access?

A. Permanently delete SharePoint sites

B. Encrypt every document within a site

C. Temporarily limit access to a SharePoint site for authorized users only

D. Automatically archive inactive sites

Correct Answer: C

Explanation: Restricted Site Access allows administrators to temporarily restrict access to a site while investigating or protecting sensitive information.

Question 3

Why is SharePoint Advanced Management valuable before deploying Microsoft 365 Copilot?

A. It increases Copilot response speed.

B. It upgrades Microsoft Graph.

C. It removes all external users automatically.

D. It helps identify overshared content that Copilot could otherwise access based on existing permissions.

Correct Answer: D

Explanation: Since Copilot honors existing permissions, reducing oversharing before deployment helps minimize the risk of exposing sensitive information.

Question 4

Which capability is included in SharePoint Advanced Management?

A. Azure virtual machine backup

B. Microsoft Intune device enrollment

C. Data Access Governance reporting

D. Windows Server patch management

Correct Answer: C

Explanation: Data Access Governance reporting is a core capability that helps administrators analyze permissions and identify overshared content.

Question 5

What happens when Restricted Site Access is enabled?

A. Microsoft 365 Copilot ignores the restriction.

B. Only approved users and administrators retain access to the site.

C. All SharePoint sites become read-only.

D. External sharing is permanently disabled across the tenant.

Correct Answer: B

Explanation: Restricted Site Access limits access to authorized users, and Copilot continues to respect those permissions.

Question 6

Which Microsoft service primarily complements SharePoint Advanced Management by classifying and protecting sensitive information?

A. Microsoft Purview

B. Microsoft Paint

C. Windows Defender Firewall

D. Microsoft Project

Correct Answer: A

Explanation: Microsoft Purview provides data classification, labeling, DLP, and compliance capabilities that complement SharePoint governance features.

Question 7

Which scenario is an appropriate use case for Restricted Site Access?

A. Scheduling recurring Teams meetings

B. Updating Microsoft 365 licenses

C. Protecting a SharePoint site containing confidential merger documents during negotiations

D. Increasing SharePoint storage capacity

Correct Answer: C

Explanation: Restricting access to highly confidential content during sensitive business activities helps reduce the risk of accidental exposure.

Question 8

Which governance activity helps reduce long-term security risks in SharePoint?

A. Creating additional anonymous sharing links

B. Allowing all users full control of every site

C. Disabling Microsoft Search

D. Reviewing inactive sites and assigning active site owners

Correct Answer: D

Explanation: Proper site ownership and lifecycle management reduce abandoned sites and improve ongoing governance.

Question 9

How does Microsoft 365 Copilot interact with a site that has Restricted Site Access enabled?

A. Copilot bypasses the restriction for administrators only.

B. Copilot ignores SharePoint permissions.

C. Copilot respects the updated permissions and cannot retrieve content for unauthorized users.

D. Copilot copies restricted files into Microsoft Graph.

Correct Answer: C

Explanation: Copilot always honors Microsoft 365 permissions. If a user cannot access a restricted site, Copilot cannot use its content in responses for that user.

Question 10

Which statement best describes SharePoint Advanced Management?

A. It replaces Microsoft Purview entirely.

B. It is focused on SharePoint and OneDrive governance, permissions, lifecycle management, and oversharing protection.

C. It functions as an antivirus solution.

D. It manages Microsoft Entra ID authentication policies.

Correct Answer: B

Explanation: SharePoint Advanced Management provides advanced governance capabilities for SharePoint and OneDrive, including oversharing detection, site lifecycle management, permission analysis, and Restricted Site Access.

Go to the AB-900 Exam Prep Hub main page