AB-900 launched in late 2025 alongside AB-730 and AB-731, and it has quietly become the most searched of Microsoft's new AB exams, at around 1,300 to 1,900 searches a month in the US. The credential is Microsoft 365 Certified: Copilot and Agent Administration Fundamentals. The skills outline updated on 14 October 2026 splits into three parts. Identifying core features of Microsoft 365 services is 30 to 35%: licensing, the admin centres for Exchange, SharePoint and Teams, Zero Trust, Entra ID, conditional access, SSO, MFA troubleshooting, PIM and app registrations. Data protection and governance for Microsoft 365 and Copilot is the biggest block at 35 to 40%, covering Purview information protection, DLP, insider risk, communication compliance, retention, DSPM for AI, how Copilot uses Microsoft Graph and existing permissions, and how to spot and fix oversharing in SharePoint, including data access governance reports and restricted access control.
Basic administrative tasks for Copilot and agents is 25 to 30%: assigning licences, setting up pay-as-you-go billing, monitoring adoption with Copilot Analytics, managing prompts, configuring who can use which agents, the agent approval process, and monitoring agents across the Microsoft 365 and Power Platform admin centres. My honest view is that the weighting is correct even if the title oversells the Copilot part. When organisations switch Copilot on, the first incident is almost always someone asking it a question and getting back a salary spreadsheet or an HR file that was shared with everyone in 2019. Copilot respects permissions, which means it faithfully exposes every bad permission you already have. An exam that spends more than a third of its weight on Purview and oversharing is teaching the thing that matters. Where it falls short is depth.
Almost every objective starts with identify, understand or explain. You are not going to come out able to build a DLP policy set or a sensible label taxonomy. Fundamentals exams are like this by design, but it means the badge tells an employer you know the landscape, not that you can run it. MS-102 for general administration and SC-401 for information protection are the exams that carry weight. The Copilot admin section is the part most likely to be stale.
Billing models, the agent inventory and Copilot Analytics have all changed in the last year, and they will change again. Use Microsoft Learn and the official docs over any third-party video course. I give it 3.8. Cheap, well aimed and useful as a first step for the people who will actually be asked to switch Copilot on. Just do not mistake it for an admin qualification.