AB-650: Administer Microsoft 365 & AI Services Training Program

Introduction

Manage the User and Contact Lifecycle

Perform Bulk Identity Management with Microsoft Graph PowerShell

Exercise - Bulk-provision Relecloud's New-Hire Users with Microsoft Graph PowerShell

Manage Guests and External Collaboration

Create and Manage Groups, Naming Policy, and Expiration Policy

Scope Delegated Administration with Administrative Units

Exercise - Scope Relecloud's Regional HR Admin with an Administrative Unit

Govern Roles with Role Groups and Privileged Identity Management

Exercise - Configure a PIM Approval Workflow for Relecloud Privileged Role

Introduction

Evaluate and Scope the Authentication Method Catalog

Enforce Password Protection for Cloud Accounts

Enable and Troubleshoot Self-Service Password Reset

Exercise - Scope Authentication Methods and Enable SSPR for Relecloud's Engineering Team

Evaluate Conditional Access Policies and Client App Conditions

Investigate and Resolve Authentication Issues

Resolve Sign-In Risk and Device Compliance in Conditional Access

Exercise - Build and Verify a Risk-Based, Device-Compliant Conditional Access Policy

Introduction

Configure Threat Policies: Presets, Custom Policies, and Precedence

Configure the Settings Inside Each Threat Policy

Extend Protection to Teams, SharePoint, and OneDrive

Exercise - Configure and Scope Threat Protection for Relecloud's Finance Team

Manage Alerts and Investigate Threats

Remediate and Reduce Human Risk: AIR and Attack Simulation Training

Exercise - Investigate a Threat and Reduce Human Risk with Attack Simulation Training

Coordinate with the Broader Microsoft Defender Security Estate

Introduction

Choose a Classification Technique for a Data Shape

Exercise - Create a Custom Sensitive Information Type for Woodgrove's Transaction Pattern

Design What a Sensitivity Label Protects

Publish Label Policies and Resolve Conflicting Settings

Exercise - Configure and Publish a Sensitivity Label Policy, then Verify Priority Resolution

Verify Classification is Working with Purview Reporting

Verify Classification Supports Safe Copilot Grounding

Introduction

Specify DLP Requirements Across Microsoft 365 Locations

Exercise - Create a DLP Policy for Microsoft 365 Copilot

Attribute DLP Alerts Across AI Apps and Agents

Respond to DLP Alerts in Microsoft Defender XDR

Exercise - Review a DLP Alert in Microsoft Defender XDR

Specify Data Lifecycle Management Requirements

Monitor AI Activity and Oversharing Risk with DSPM for AI

Exercise - Review a DSPM for AI Data Risk Assessment

Recognise the Broader Microsoft Purview Governance Surface

Introduction

Assess Tenant Readiness for a Copilot Rollout

Exercise - Run and Interpret the Copilot Readiness Report

Identify and Resolve Data-Readiness Issues

Exercise - Remediate an Oversharing Risk Before Rollout

Plan a Phased Rollout Across the Organisation

Exercise - Stage a Phased Pilot Rollout Group

Introduction

Configure the Copilot Tenant-Settings Catalog

Exercise - Configure the Copilot Settings Catalog

Manage Web Search for Copilot and Copilot Chat

Configure Copilot Search

Exercise - Configure Web Search and Copilot Search

Manage Third-Party AI Providers

Exercise - Enable a Third-Party AI Provider

Configure Copilot Connectors

Govern SharePoint AI Skills and the Frontier Program

Introduction

Understand the Microsoft Entra Agent ID Object Model

Assign a Sponsor and a Least-Privilege Owner

Exercise - Assign a Sponsor and Owner to an Agent Identity

Automate Sponsor Transfer with Lifecycle Workflows

Exercise - Configure a Sponsor-Transfer Lifecycle Workflow

Apply Conditional Access to Agent Identities and Choose the Right License

Exercise - Apply Conditional Access to an Agent Identity Blueprint

Introduction

Review, Approve, and Block Tools for Agents

Exercise - Review, Approve, and Block a Tool

Govern Bring Your Own MCP Servers

Exercise - Review a Bring Your Own Model Context Protocol (MCP) Server Registration

Perform Ongoing Agent Registry Curation

Exercise - Reassign an Active Agent's Owner

Audit the Agent Estate by Publisher and Channel

Introduction

Introduction to Microsoft Entra Agent ID

Monitor and Manage Agents

Scenario

Exercise Monitor Agents from the Overview Page

Exercise - Monitor Agents Inventory in Registry

Exercise - Monitor Agents Using the Agent Map

Exercise - View Agents with Exceptions and Take Action

Exercise - Measure Agent Effectiveness

Exercise Monitor Connected Platforms

Introduction

Govern Agents Scenarios

Exercise Set up Agent Settings and Access

Security and Governance Policies

Exercise Set up Policy Template

Exercise Set up Permissions Using Access Packages

Exercise Onboard an Agent

Exercise Deploy and Activate Agents

Exercise - Assign Owners to Agents to Prevent Agent Sprawl

Exercise - Block Agents with Security Risks

Exercise Use Rules and Automate Agent Management

Manage Tools

Exercise - Activate and Manage Tools

View Audit Logs

Introduction

Pick the Right Report Source for a Copilot Adoption Question

Exercise - Pick the Right Report Source

Read the Copilot Usage Report and the Agent Usage Report

Exercise - Read the Copilot Usage Report and the Agent Usage Report

Reconcile Copilot and Agent Costs Across Surfaces

Exercise - Reconcile Copilot and Agent Costs Across Surfaces

Assess AI-service Health with the Copilot Control System