Administering Microsoft 365 and AI Services (AB-650)

In this course, you will learn how to configure, manage, secure, and govern Microsoft 365 tenants, traditional workloads, and AI services like Microsoft 365 Copilot and AI agents. As a Microsoft 365 and AI services administrator, you collaborate with architects and administrators across workloads, infrastructure, identity, security, compliance, endpoints, and applications.

Retail Price: $2,195.00

Next Date: 12/15/2026

Course Days: 3


Enroll in Next Date

Request Custom Course


What you will learn

With a focus on practical applications, the course covers:

Configure and Manage Tenants and Workloads

  • Tenant Setup: Configure branding, custom themes, domains, and organizational settings.
  • Licensing: Manage user licenses, group-based licensing, and pay-as-you-go billing for standard and AI tools.
  • Core Services: Operate Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams.
  • Operations: Monitor service health, network connectivity insights, and Microsoft 365 Backup.

Govern and Secure Microsoft 365

  • Identity & Access: Manage Microsoft Entra ID, multifactor authentication (MFA), Conditional Access policies, and Privileged Identity Management (PIM).
  • Threat Protection: Use Microsoft Defender for Office 365 to investigate alerts and handle security policies.
  • Compliance & Data: Implement Microsoft Purview features like Data Loss Prevention (DLP), sensitivity labels, retention policies, and data security posture management (DSPM) for AI.

Manage and Secure AI Services

  • Copilot Administration: Deploy Microsoft 365 Copilot, set up connectors, and manage tenant-level readiness.
  • Agent Governance: Administer Microsoft Agent 365, configure AI agent identities using Microsoft Entra Agent ID, and control access.
  • Usage & Costs: Monitor AI adoption rates, track service consumption, and audit operational costs.

What products and services will you use and learn about in this course

  • Microsoft Entra ID
  • Microsoft Entra Privileged Identity Management (PIM
  • Conditional Access & MFA
  • Exchange Online & Microsoft Teams
  • SharePoint Online & OneDrive
  • Microsoft 365 Backup
  • Microsoft Defender for Office 365
  • Microsoft Purview
  • Data Security Posture Management (DSPM) for AI
  • Microsoft 365 Copilot
  • Microsoft Entra Agent ID
  • Agent 365 & Microsoft Copilot Studio
  • Copilot Control System

Audience

This course is designed for users who configure, manage, secure, and govern Microsoft 365 tenants, workloads, and AI services, including Microsoft 365 Copilot, agents, and connected AI capabilities. You enable secure, compliant, and scalable productivity across the organization by governing data access, protecting information, and supporting collaboration between users and agents. You operate and continuously optimize Microsoft 365 and AI services at enterprise scale, helping to ensure reliable and effective outcomes in an AI-powered workplace.

Prerequisites

Before attending this course, students must have:

  • Microsoft 365 Workloads: Hands-on experience configuring and managing core services
  • Microsoft Entra ID: Knowledge of identity governance, user management, and access controls
  • Microsoft Defender XDR: Understanding of extended detection and response security capabilities
  • Microsoft Graph PowerShell: Familiarity with running commands and performing bulk management tasks

Prepare for the Microsoft Certified: Administering Microsoft 365 and AI Services Certification  

This course is designed to help students confidently prepare for the AB-650: Administering Microsoft 365 and AI Services exam. The study areas for the certification are based on Job Task Analysis that are conducted annually.

Note: To pass the certification test, studying outside the course may be required to ensure all the concepts are fully understood.


Course Outline

Learning Path: Configure and manage Microsoft 365 tenants and workloads

Configure and manage a Microsoft 365 tenant end-to-end. Follow Relecloud, an AI-native company rolling out Microsoft 365 Copilot to its own workforce, through five modules covering tenant provisioning and branding, license rollout at scale, tenant resilience and health monitoring, Exchange and Teams collaboration, and SharePoint/OneDrive governance for Microsoft 365 Copilot.

Modules:

  • Provision and brand a Microsoft 365 tenant
  • License Microsoft 365 and AI services at scale
  • Keep a Microsoft 365 tenant resilient and healthy
  • Configure Exchange Online and Microsoft Teams workloads
  • Govern SharePoint and OneDrive for Microsoft 365 Copilot

Exercises:

  • Delegate domain administration and add a custom domain
  • Configure organization branding
  • Configure organizational settings
  • Assign, verify, and troubleshoot Microsoft 365 Copilot licensing for Relecloud's marketing rollout
  • Configure pay-as-you-go billing for Relecloud's Copilot Studio pilot team
  • Configure Backup for Relecloud's critical workloads
  • Interpret Relecloud's Copilot adoption data
  • Configure Relecloud shared mailboxes and delegate access
  • Build a Copilot-ready team for Relecloud's account managers
  • Set up and audit a governed SharePoint site
  • Remediate the Finance site and choose the right control

 

Learning Path: Govern and secure Microsoft 365 tenants and workloads

Govern and secure a Microsoft 365 tenant end-to-end. Follow Relecloud, an AI-native company that protects Woodgrove Bank's regulated financial data, through five modules covering identity governance, authentication and access, threat protection, information protection, and data loss prevention.

Modules:

  • Provision and govern identities in Microsoft Entra
  • Implement authentication and access in Microsoft Entra
  • Secure email and collaboration with Microsoft Defender for Office 365
  • Protect information with Microsoft Purview information protection
  • Prevent data loss and govern the data lifecycle with Microsoft Purview

Exercises:

  • Bulk-provision Relecloud's new-hire users with Microsoft Graph PowerShell
  • Scope Relecloud's regional HR admin with an administrative unit
  • Scope authentication methods and enable SSPR for Relecloud's engineering team
  • Build and verify a risk-based, device-compliant Conditional Access policy
  • Configure and scope threat protection for Relecloud's finance team
  • Investigate a threat and reduce human risk with attack simulation training
  • Create a custom sensitive information type for Woodgrove's transaction pattern
  • Configure and publish a sensitivity label policy, then verify priority resolution
  • Create a DLP policy for Microsoft 365 Copilot
  • Review a DLP alert in Microsoft Defender XDR
  • Review a DSPM for AI data risk assessment

 

Learning Path: Manage and secure Microsoft 365 AI services

Roll out, secure, and monitor Microsoft 365 Copilot and agents end-to-end. Follow Relecloud, an AI-native company scaling Microsoft 365 Copilot and agents across engineering, customer success, and its Woodgrove Bank fraud-investigation work, through seven modules covering Copilot readiness and rollout, Copilot settings and extensibility, agent identity, agent curation, agent monitoring, agent governance, and AI-services cost and adoption monitoring.

Modules:

  • Assess readiness and roll out Microsoft 365 Copilot
  • Take action in external systems using connector and REST API agent tools in Microsoft Copilot Studio
  • Ground agents with enterprise knowledge using connectors and Azure AI Search in Microsoft Copilot Studio
  • Integrate agents with external systems via MCP in Microsoft Copilot Studio

Exercises:

  • Run and interpret the Copilot readiness report
  • Remediate an oversharing risk before rollout
  • Stage a phased pilot rollout group
Course Dates Course Times (EST) Delivery Mode GTR
12/15/2026 - 12/17/2026 10:00 AM - 6:00 PM Virtual Enroll