Running Microsoft 365 once AI is part of it — provisioning and governing Copilot and agents alongside the tenant administration you already do.
Microsoft 365 administrators whose job grew an AI half. Currently in beta, so expect the objectives to move.
Level: Intermediate · Official credential: Administering Microsoft 365 and AI Services
Straight to the official sources — no sign-up, no reselling
The administrator exam for a tenant that now has AI in it. The first quarter is the familiar ground — tenants, domains, licensing, mailboxes, Teams and SharePoint. The rest is what changes once Copilot, Cowork and agents are switched on: who can reach what, which content surfaces in a Copilot answer, and how a non-human identity is governed through its life. Roughly three quarters of the exam is about securing and governing the estate rather than building it, which tells you where the job has moved.
Assumed knowledge: Hands-on with Microsoft 365 workloads and Microsoft Entra ID, a working understanding of Defender XDR, and some Microsoft Graph PowerShell.
Why people in this role end up sitting AB-650
7 labs across 3 learning paths
Seven hands-on labs across three learning paths. The first pair covers operating the tenant and governing collaboration content. The middle three are the identity and protection block — delegated access, sign-in controls and information protection. The last two are the AI half: rolling out Copilot Cowork, then governing agents and running AI services day to day.
Everything a partner needs to put this course in front of the right customer. Lift any of it straight into a proposal.
“The customer has already paid for Copilot. This is the course that keeps the rollout from becoming a security incident.”
Who signs: IT manager or head of infrastructure holds the budget; the CISO signs off the governance half.
Who attends: Microsoft 365 administrators, Entra and identity admins, and service desk leads moving up into tenant work.
And a straight answer for each
About a fifth of this is revision. The rest is new ground: agent identities, Copilot-aware DLP, data security posture management, and the Copilot readiness work that has no equivalent in the old MS-102 world.
Beta applies to the exam, not the product. The tenant work is live now, and the oversharing problem is live with it. Train now, certify when it goes GA.
They can, and they should. The difference is seven labs on a tenant that is not production, plus somebody in the room who has done the rollout before.
Oversharing scales with how much content you have, not how many licences. A pilot of twenty people can surface a decade of badly permissioned SharePoint.
It is one day of admin refresh and two days of the governance and AI work their security team is already asking them about.
We deliver the official Microsoft course for AB-650 — in person or virtual, public or in-company. Real demos, real stories, and the whiteboards to take home.
Prefer to browse first? See the full course catalog or the upcoming dates.
Exam titles, study guides and practice assessments are published by Microsoft and linked here directly; the descriptions on this page are our own. Microsoft may update exam content at any time — the official study guide is always the authority.