The AI wave has already arrived at work
Over the past two years, Microsoft 365 Copilot has quietly moved from “interesting demo” to “thing my colleagues actually use every day.” People draft emails with it, summarize meetings with it, and increasingly, they’re building their own AI agents to automate repetitive tasks — no code required.
That’s the exciting part. Here’s the less-talked-about part: most organizations rolled this out faster than they figured out how to govern it. Who can create an agent? What data can Copilot see? What happens when an agent has access to a sensitive SharePoint site it shouldn’t? These aren’t hypothetical questions anymore — they’re daily realities for IT teams, and very few people have been formally trained to answer them.
That gap is exactly why Microsoft created a new certification — AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals — and why Steve Miles’ new book on the topic is landing at exactly the right moment.
Copilot in action: this isn’t hype anymore
It’s easy to be skeptical of AI buzzwords, so it’s worth grounding this in what’s actually happening inside real organizations:
- Consulting giant PwC rolled out Microsoft 365 Copilot across its workforce, weaving it into everyday tools like Word, Excel, Outlook, and Teams to cut down on repetitive work and free people up for higher-value tasks.
- Publicis, the global advertising group, proved that a Copilot rollout can scale fast — deploying it across some 114,000 employees within months by building on infrastructure it already had in place.
- Brazilian media giant Globo, reaching more than 100 million daily viewers, launched a company-wide cultural initiative around Copilot adoption and reported measurable time savings and improved operational accuracy as a result.
- Even Microsoft’s own internal Customer Service and Support organization ran a controlled study: agents using Copilot in Dynamics 365 Customer Service saw a 12% reduction in time spent resolving a case, compared to a control group that didn’t have access.
- More broadly, Copilot has now surpassed 20 million paid enterprise seats, with more than 60% of Fortune 500 companies using it, and independent research from Forrester projects a wide range of ROI outcomes for enterprise deployments.
The pattern across these examples is consistent: real time savings, faster content creation, and less manual busywork. But notice what else they have in common — every one of them required a deliberate, organization-wide rollout strategy, not just flipping a switch. That’s precisely the space this book operates in.
What the book actually covers
Microsoft 365 Copilot and Agent Administration Fundamentals is a practical guide built around the AB-900 exam objectives, but it’s useful well beyond exam prep. It walks readers through:
- The building blocks of Microsoft 365 — the core services, admin centers, and everyday objects (users, groups, teams, sites) that everything else depends on
- Security and identity fundamentals — authentication, conditional access, Zero Trust principles, and single sign-on
- Data protection and governance — how Microsoft Purview and related tools keep sensitive information from ending up somewhere it shouldn’t
- Copilot itself — licensing models, what Copilot can and can’t see, and how to control which features are switched on for which users
- Agent administration — how to create, configure, approve, deploy, and monitor AI agents (including SharePoint agents and Copilot Studio agents) across an organization, safely and at scale
The book also includes chapter assessments and practice questions, plus a DRM-free PDF and access to Packt’s reader, so it doubles as a genuine study companion for the certification exam — not just a general-interest read.
The real challenges organizations run into
The case studies above are the success stories. In practice, most organizations hit friction long before they get there. A few of the most common sticking points — and where the book directly addresses them:
“Who’s allowed to build an agent?” Copilot Studio and SharePoint agents make it possible for non-developers to create AI agents in minutes. That’s a huge productivity unlock, but without a clear approval and access-control process, it also means agents can multiply faster than anyone is tracking them. The book walks through exactly how to configure user access, set up approval workflows, and roll out licensing in controlled stages rather than all at once.
“What data can this agent actually see?” An agent is only as safe as the permissions behind it. If it’s connected to a SharePoint library with broader access than intended, it can just as easily surface sensitive content as it can save someone time. This is where the book’s coverage of Microsoft Purview, sensitivity labels, and conditional access becomes practical rather than theoretical — it’s framed specifically around how these controls interact with Copilot and agents, not just as generic security theory.
“How do we know if this is even working?” Once agents are live, monitoring adoption, usage, and lifecycle becomes its own ongoing task. The book covers how to use the Microsoft 365 admin center and the Power Platform admin center to track operational insights — so decisions about scaling up (or pulling back) are based on real usage data, not guesswork.
“Our team doesn’t have deep AI expertise yet.” This is perhaps the most common blocker of all — and the book’s biggest strength. It doesn’t assume you’re already an AI specialist. It starts from Microsoft 365 fundamentals (licensing, Exchange Online, SharePoint, Teams, identity) and builds up to Copilot and agent administration step by step, so teams without deep AI backgrounds still have a clear path forward.
What people are seeing in this space
There isn’t yet a large public track record of reviews for this specific title since it’s newly published, so rather than invent quotes, it’s worth pointing to what the broader data says about the moment this book was written for: Microsoft’s own Work Trend Index research found that when given the choice, Copilot’s earliest users overwhelmingly said they’d pick continued access to it over other workplace perks — a strong signal of genuine day-to-day value once people learn to use it well. That’s the adoption curve organizations are trying to climb, and it’s exactly the curve this book is designed to help IT professionals manage responsibly.
Why this matters beyond the exam
You don’t need to be chasing a certification badge to benefit from this. A few reasons this topic deserves attention right now:
AI agents are becoming self-service. Tools like Copilot Studio let regular employees — not just developers — build agents that automate parts of their job. That’s empowering, but it also means governance can’t just live with a small central IT team anymore. Understanding how agents are approved, licensed, and monitored is quickly becoming baseline knowledge for anyone responsible for a Microsoft 365 tenant.
“It works” and “it’s safe” are two different questions. An agent that pulls data from the right SharePoint library is a productivity win. The same agent with the wrong permissions is a data-leak risk. The book’s emphasis on security and Purview alongside the Copilot features themselves reflects how these two concerns are now inseparable in practice.
Fundamentals age well. AI features change fast, but the underlying discipline — identity management, conditional access, governance frameworks — doesn’t. Investing time in these fundamentals pays off even as the tools on top of them keep evolving.
Who should pick this up — beginners and experienced admins alike
One of the more useful things about this book is that it doesn’t require you to already be a Microsoft 365 expert, but it also doesn’t stay so basic that experienced admins will outgrow it after chapter two.
If you’re newer to Microsoft 365 or IT administration, the book starts you at the foundations — licensing, Exchange Online, SharePoint, Teams, and identity basics — before it ever gets to Copilot. Prior Copilot administration experience isn’t required, which makes it a realistic entry point for:
- IT support staff or helpdesk professionals suddenly fielding “Copilot questions”
- Career-switchers or junior IT professionals looking to build AI-adjacent skills early
- Business or technology professionals who want to understand Copilot governance without becoming hands-on administrators
If you’re already an experienced Microsoft 365 administrator or consultant, the value shifts toward the agent-specific and governance content: configuring approval workflows, staged licensing rollouts, Purview integration, and monitoring via the admin centers. That’s a good fit for:
- Microsoft 365 or Power Platform consultants advising clients on secure Copilot rollouts
- Security and compliance teams who need to understand exactly how Copilot and agents interact with existing data protection controls
- Anyone specifically targeting the AB-900 certification, regardless of starting skill level
In short: come in as a beginner and you’ll leave with a working foundation; come in as a seasoned admin and you’ll leave with a structured, exam-ready framework for the Copilot and agent pieces you may only know informally so far.
The bigger picture
AI copilots and agents aren’t a trend that’s going to quietly fade — they’re becoming a permanent layer of how people work inside Microsoft 365. The organizations that get the most value from that shift won’t just be the ones that adopt AI fastest; they’ll be the ones that adopt it responsibly, with people who understand both the productivity upside and the governance guardrails.
That combination — practical, security-aware, and genuinely useful for daily admin work — is exactly what makes this book worth a look, whether or not the AB-900 exam is on your radar.
Ready to get started?
Whether you’re chasing the AB-900 certification, trying to get ahead of the Copilot questions landing on your desk, or just want a clear-eyed look at how AI governance actually works in Microsoft 365, this book is a practical place to start — and it’s structured so you can go straight to the chapters most relevant to where you are today.
Order Microsoft 365 Copilot and Agent Administration Fundamentals →
Yves Habersaat - Microsoft MVP (M365) & MCT 