This is an example of a simple banner

Training: Administer Microsoft 365 and AI services (AB-650)

Ref. AB-650T00
Duration:
3
 days
Exam:
Optional
Level:
Intermediate

Administer Microsoft 365 and AI services (AB-650) Training

Administering Microsoft 365 is no longer just about creating accounts and mailboxes. With Microsoft 365 Copilot and agents, every overshared file can surface in an answer, and every agent becomes an identity to govern. The AB-650 training, successor to MS-102, prepares Microsoft 365 administrators for this new scope: a well-run tenant, protected data and AI services under control.

Three days to administer Microsoft 365 in the age of Copilot and agents

The official Microsoft curriculum has 17 modules. You provision the tenant, manage licensing and billing for AI services, configure Exchange Online, Teams, SharePoint and OneDrive, then secure identities with Microsoft Entra, email with Defender for Office 365 and data with Microsoft Purview. The final part is about AI: Microsoft Copilot readiness and rollout, agent identities with Microsoft Entra Agent ID, agent governance with Agent 365 and cost monitoring. You leave prepared for the AB-650 exam.

Participant Profiles

  • Microsoft 365 administrators
  • Administrators preparing or running a Microsoft 365 Copilot rollout
  • Exchange, Teams or SharePoint administrators broadening their scope
  • Microsoft 365 security and compliance owners
  • MS-102 certified administrators moving to AB-650

Objectives

  • Provision and administer a Microsoft 365 tenant, its licenses and its workloads
  • Govern identities and access with Microsoft Entra
  • Protect email, files and data with Microsoft Defender and Microsoft Purview
  • Prepare data and roll out Microsoft Copilot across the organization
  • Manage agent identities, tools and governance with Microsoft Entra Agent ID and Agent 365
  • Monitor adoption, health and costs of Microsoft 365 AI services

Prerequisites

  • Experience administering Microsoft 365 workloads and Microsoft Entra ID
  • An understanding of Microsoft Defender XDR capabilities
  • Familiarity with Microsoft Graph PowerShell

Course Content

Module 1: Provision and brand a Microsoft 365 tenant

  • Understand the Microsoft 365 tenant
  • Assign least-privilege administrator roles
  • Add and verify a custom domain
  • Configure organization branding across two portals
  • Configure organizational settings

Module 2: License Microsoft 365 and AI services at scale

  • Assign and manage Microsoft 365 licenses
  • Verify and troubleshoot license assignments
  • License AI services for the right populations
  • Understand how Microsoft 365 billing is structured
  • Set up pay-as-you-go billing for AI-service usage

Module 3: Keep a Microsoft 365 tenant resilient and healthy

  • Configure Microsoft 365 Backup for critical workloads
  • Monitor service health and configure notifications
  • Diagnose network connectivity issues affecting Microsoft Copilot
  • Monitor Microsoft 365 usage and adoption
  • Recognize the endpoint and client-management ecosystem

Module 4: Configure Exchange Online and Microsoft Teams workloads

  • Create and manage mailboxes
  • Delegate mailbox access: Full Access, Send As, and Send on Behalf
  • Understand how mail routes through Exchange Online
  • Create and manage teams, channels, owners, and members
  • Configure Microsoft Copilot in Teams meetings

Module 5: Govern SharePoint and OneDrive for Microsoft Copilot

  • Create and manage SharePoint sites
  • Set the boundary: SharePoint and OneDrive sharing settings
  • Find overshared sites before Microsoft Copilot does
  • Limit broad discovery, not access: Restricted Content Discovery
  • Enforce access with Restricted Access Control
  • Troubleshoot legacy Restricted SharePoint Search
  • Choose the right control for the job

Module 6: Provision and govern identities in Microsoft Entra

  • Manage the user and contact lifecycle
  • Perform bulk identity management with Microsoft Graph PowerShell
  • Manage guests and external collaboration
  • Create and manage groups, naming policy, and expiration policy
  • Scope delegated administration with administrative units
  • Govern roles with role groups and Privileged Identity Management

Module 7: Implement authentication and access in Microsoft Entra

  • Evaluate and scope the authentication method catalog
  • Enforce Password Protection for cloud accounts
  • Enable and troubleshoot self-service password reset
  • Evaluate Conditional Access policies and client app conditions
  • Investigate and resolve authentication issues
  • Resolve sign-in risk and device compliance in Conditional Access

Module 8: Secure email and collaboration with Microsoft Defender for Office 365

  • Configure threat policies: presets, custom policies, and precedence
  • Configure the settings inside each threat policy
  • Extend protection to Teams, SharePoint, and OneDrive
  • Manage alerts and investigate threats
  • Remediate and reduce human risk: AIR and attack simulation training
  • Coordinate with the broader Microsoft Defender security estate

Module 9: Protect information with Microsoft Purview information protection

  • Choose a classification technique for a data shape
  • Design what a sensitivity label protects
  • Publish label policies and resolve conflicting settings
  • Verify classification is working with Purview reporting
  • Verify classification supports safe Microsoft Copilot grounding

Module 10: Prevent data loss and govern the data lifecycle with Microsoft Purview

  • Specify DLP requirements across Microsoft 365 locations
  • Attribute DLP alerts across AI apps and agents
  • Respond to DLP alerts in Microsoft Defender XDR
  • Specify data lifecycle management requirements
  • Monitor AI activity and oversharing risk with Data Security Posture Management
  • Recognize the broader Microsoft Purview governance surface

Module 11: Assess readiness and roll out Microsoft Copilot

  • Assess tenant readiness for a Microsoft Copilot rollout
  • Identify and resolve data readiness issues
  • Plan a phased rollout across the organization

Module 12: Configure Microsoft Copilot settings and extensibility

  • Configure the Microsoft Copilot tenant-settings catalog
  • Manage web search for Microsoft Copilot and Copilot Chat
  • Manage Copilot Cowork
  • Configure Copilot Search
  • Manage third-party AI providers
  • Configure Copilot connectors
  • Govern SharePoint AI skills and the Frontier program

Module 13: Establish agent identities and secure access with Microsoft Entra Agent ID

  • Understand the Microsoft Entra Agent ID object model
  • Assign a sponsor and a Microsoft Entra owner
  • Automate sponsor transfer with Lifecycle Workflows
  • Apply Conditional Access to agent identities and choose the right license

Module 14: Curate and control agents with the Agent Registry and Agent 365 tools

  • Review, approve, and block tools for agents
  • Govern bring your own MCP servers
  • Perform ongoing Agent Registry curation
  • Audit the agent estate by publisher and channel

Module 15: Monitor and manage agents with Microsoft Agent 365

  • Monitor and manage agents

Module 16: Govern agents using Agent 365

  • Govern agents scenarios
  • Security and governance policies
  • Manage tools
  • View audit logs

Module 17: Monitor and optimize Microsoft 365 AI services

  • Pick the right report source for a Microsoft Copilot adoption question
  • Read the Microsoft Copilot usage report and the Agent usage report
  • Reconcile Microsoft Copilot and agent costs across surfaces
  • Optimize AI spend across Microsoft 365 AI services
  • Assess AI-service health with the Copilot Control System

Documentation

  • Access to Microsoft Learn, Microsoft’s online learning platform, offering interactive resources and educational content to deepen your knowledge and develop your technical skills.

Lab / Exercises

  • This course provides you with exclusive access to the official Microsoft lab, enabling you to practice your skills in a professional environment.

Exam

  • This course prepares you to the AB-650: Administering Microsoft 365 and AI Services exam.

Complementary Courses

Eligible Funding

ITTA is a partner of a continuing education fund dedicated to temporary workers. This fund can subsidize your training, provided that you are subject to the “Service Provision” collective labor agreement (CCT) and meet certain conditions, including having worked at least 88 hours in the past 12 months.

Additional Information

Microsoft 365 administrator training: why AB-650 replaces MS-102

Microsoft retires the MS-102 Microsoft 365 Administrator course on November 30, 2026. Its successor, AB-650, does more than refresh the curriculum. It redefines the role: the Microsoft 365 administrator now runs a tenant where users, Microsoft 365 Copilot and agents work together.

The format changes too. MS-102 lasted five days, AB-650 lasts three. The foundations remain: tenant, domains, licensing, Exchange Online, Teams, SharePoint, Microsoft Entra, Defender and Purview. They are covered more tightly and always from the same angle: what they change for a tenant where AI reads the company’s data.

Getting data ready for Microsoft Copilot

Microsoft Copilot answers from whatever the user is allowed to see. A SharePoint site opened to the whole organization for convenience becomes a source of answers for everyone. The course spends a full module on this: finding overshared sites, limiting discovery with Restricted Content Discovery without cutting access, or restricting access itself with Restricted Access Control.

Microsoft Purview completes the picture. Sensitivity labels, data loss prevention for AI apps and agents, and Data Security Posture Management let you check that Copilot relies on properly classified data. For Swiss organizations subject to the revised FADP or sector requirements, this is often the condition for opening Copilot beyond a pilot group.

Agents, new identities to govern

This is the newest part of the curriculum. An agent acts on behalf of the organization: it needs an identity, an owner and access rules. With Microsoft Entra Agent ID, you assign a sponsor and an owner to each agent, automate their transfer when someone leaves and apply Conditional Access to agent identities.

The Agent Registry and Microsoft Agent 365 then give you the full picture: which agents exist, who published them, on which channels, with which tools and MCP servers. You learn to approve or block those tools, monitor agent activity and review audit logs.

Licensing, costs and AI service monitoring

AI services add a budget dimension administrators can no longer ignore. The course covers assigning Microsoft 365 Copilot and Agent 365 licenses to the right populations, pay-as-you-go billing and reconciling Copilot and agent costs. The final module teaches you to read usage reports to answer management’s questions: who uses Copilot, with what effect and at what cost.

Microsoft 365 and AI Services Administrator Associate certification

The AB-650 exam (Administering Microsoft 365 and AI Services) leads to the Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate certification, offered in beta at launch. It assesses three areas: configuring and managing Microsoft 365 tenants and workloads (20 to 25%), governing and securing them (40 to 45%), and managing and securing Microsoft 365 AI services (35 to 40%). The exam is booked with Microsoft and remains optional.

ITTA, a Microsoft Learning Partner, delivers AB-650 with MCT-certified trainers, in person in Geneva and Lausanne or in a virtual classroom, using official Microsoft courseware and 180 days of access to the official labs.

FAQ

I am MS-102 certified: what happens to my certification?

Your Microsoft 365 Administrator certification stays valid until it expires. AB-650 becomes the reference path for Microsoft 365 administrators: the training brings you up to date on Copilot, agents and Agent 365, which MS-102 did not cover.

Why three days instead of five for MS-102?

Microsoft tightened the course around the skills assessed by the AB-650 exam. Prior experience administering Microsoft 365 and Microsoft Entra ID is therefore expected: the course does not go back over the basics of the service.

Who is the AB-650 training for?

Current Microsoft 365 administrators, Exchange, Teams or SharePoint administrators broadening their scope, and teams preparing a Microsoft 365 Copilot rollout or the arrival of agents in the organization.

Do I need to know PowerShell?

Some familiarity with Microsoft Graph PowerShell is recommended, notably for bulk identity management. You do not need to write complex scripts.

Does the course cover device management with Intune?

The course places the endpoint management ecosystem in context but does not cover it in detail. To manage and secure devices with Intune, the MD-102 training is the right complement.

Which roles value this certification in Switzerland?

Microsoft 365 administrators, collaboration platform owners, systems engineers and Microsoft 365 consultants. In French-speaking Switzerland, many organizations are rolling out Copilot and look for people who can do it while keeping control of their data.

Prix de l'inscription
CHF 2'350.-
Inclus dans ce cours
  • Training provided by a certified trainer
  • 180 days of access to Official Microsoft Labs
  • Official documentation in digital format
  • Official Microsoft achievement badge
Mois actuel

lun04Jan(Jan 4)09:00mer06(Jan 6)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun04Jan(Jan 4)09:00mer06(Jan 6)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun01Fév09:00mer03(Fév 3)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun01Fév09:00mer03(Fév 3)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun01Mar09:00mer03(Mar 3)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun01Mar09:00mer03(Mar 3)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun12Avr(Avr 12)09:00mer14(Avr 14)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun12Avr(Avr 12)09:00mer14(Avr 14)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun10Mai(Mai 10)09:00mer12(Mai 12)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun10Mai(Mai 10)09:00mer12(Mai 12)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun07Juin(Juin 7)09:00mer09(Juin 9)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun07Juin(Juin 7)09:00mer09(Juin 9)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun12juil(juil 12)09:00mer14(juil 14)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun12juil(juil 12)09:00mer14(juil 14)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun09Aoû(Aoû 9)09:00mer11(Aoû 11)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun09Aoû(Aoû 9)09:00mer11(Aoû 11)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun13Sep(Sep 13)09:00mer15(Sep 15)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun13Sep(Sep 13)09:00mer15(Sep 15)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun18Oct(Oct 18)09:00mer20(Oct 20)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun18Oct(Oct 18)09:00mer20(Oct 20)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun15Nov(Nov 15)09:00mer17(Nov 17)17:00Genève, Route des Jeunes 35, 1227 Genève Etiquettes de sessionAB-650T00

lun15Nov(Nov 15)09:00mer17(Nov 17)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

lun13Déc(Déc 13)09:00mer15(Déc 15)17:00Lausanne, Av. Mon-Repos 24, 1005 Lausanne Etiquettes de sessionAB-650T00

lun13Déc(Déc 13)09:00mer15(Déc 15)17:00VirtuelVirtual Etiquettes de sessionAB-650T00

Contact

ITTA
Route des jeunes 35
1227 Carouge, Suisse

Opening hours

Monday to Friday
8:30 AM to 6:00 PM
Tel. 058 307 73 00

Contact-us

ITTA
Route des jeunes 35
1227 Carouge, Suisse

Make a request

Contact

ITTA
Route des jeunes 35
1227 Carouge, Suisse

Opening hours

Monday to Friday, from 8:30 am to 06:00 pm.

Contact us

Your request