
An independent study guide for Microsoft 365 Certified: Copilot and Agent Administration Fundamentals · by Tony Rough
Know which Microsoft 365 control governs Copilot, and why.
Due on Amazon in November 2026, in Kindle and paperback editions.
This independent study guide for the Microsoft 365 Certified: Copilot and Agent Administration Fundamentals exam distils what AB-900 really expects you to understand into clear explanations, comparisons and the traps that catch beginners. It uses Microsoft's current names, including Microsoft Copilot (formerly Microsoft 365 Copilot), and notes where older material and today's product differ.
Nine chapters, each readable on its own and together covering all three AB-900 skill areas:
Microsoft 365 and Copilot change quickly. This edition reflects Microsoft's documentation as of October 2026, including the Copilot renaming, the new Copilot admin pages and recent retirements.
This book contains no exam questions. It explains the knowledge the exam expects, so you can answer questions you have never seen and administer Copilot and agents with confidence at work.
Written by Tony Rough, a cloud architect with more than twenty years in IT infrastructure who holds the Azure Solutions Architect Expert, Azure Administrator and Azure Security Engineer certifications.
Part of the Ultra Transcenders series from Distilled Press. An independent publication, not affiliated with, sponsored by or endorsed by Microsoft Corporation.
Every skill area in Microsoft's AB-900 outline (as of October 14, 2026), and the chapters that cover it.
| Skill area | Weight | Chapters |
|---|---|---|
| Identify the core features and objects of Microsoft 365 services | 30–35% | 1, 2, 3, 4 |
| Understand data protection and governance tasks for Microsoft 365 and Copilot | 35–40% | 5, 6, 7, 8 |
| Perform basic administrative tasks for Copilot and agents | 25–30% | 9 |
Plus an appendix glossary of 200+ terms, each linked to Microsoft Learn, with the same terms explained free online for print readers.



Some sections of the book, free to read online:
Verify explicitly, use least privilege access and assume breach, and the pillars they apply to.
How Conditional Access turns sign-in signals into block or grant decisions, and what licence it needs.
What the score measures, how often it is recalculated and which recommendations raise it.
What each Exchange Online mailbox permission allows and which recipients and groups can hold it.
Sharing-link, permission and Everyone except external users reports for finding oversharing.
How restricted site access limits a site to members of chosen groups, even for users with permission.
What the two built-in reasoning agents are for, how they are deployed and when a custom agent fits.
How billing policies connect metered Copilot Chat and SharePoint agent use to an Azure subscription, and what budgets do.