🔒 Guided

Pre-launch preview. Authorised access only.

Incorrect code

Guided by A Guide to Cloud
Explore AB-900 AI-901
Guided AB-900 Domain 3
Domain 3 — Module 1 of 8 13%
21 of 28 overall

AB-900 Study Guide

Domain 1: M365 Core Features & Objects

  • Welcome to Microsoft 365
  • Exchange Online: Mailboxes & Distribution
  • SharePoint: Sites, Libraries & Permissions
  • Microsoft Teams: Teams, Channels & Policies
  • Users, Groups & Licensing
  • Zero Trust: Never Trust, Always Verify
  • Authentication: Passwords, MFA & Beyond
  • Microsoft Defender XDR
  • Microsoft Entra: Your Identity Hub
  • PIM, Audit Logs & Identity Governance

Domain 2: Data Protection & Governance

  • Microsoft Purview: The Big Picture
  • Sensitivity Labels & Data Classification
  • Data Loss Prevention (DLP)
  • Insider Risk & Communication Compliance
  • DSPM for AI & Data Lifecycle
  • How Copilot Accesses Your Data
  • Responsible AI Principles
  • Compliance Manager & eDiscovery
  • Activity Explorer & Data Monitoring
  • Oversharing in SharePoint

Domain 3: Copilot & Agent Admin

  • What is Microsoft 365 Copilot? Free
  • What Are Agents? Free
  • Copilot vs Agents: When to Use Which Free
  • Copilot Licensing: Monthly vs Pay-as-You-Go Free
  • Researcher, Analyst & Real-World Use Cases Free
  • Managing Copilot: Billing, Monitoring & Prompts Free
  • Building Agents: Create, Test & Publish Free
  • Agent Lifecycle: Access, Approval & Monitoring Free

AB-900 Study Guide

Domain 1: M365 Core Features & Objects

  • Welcome to Microsoft 365
  • Exchange Online: Mailboxes & Distribution
  • SharePoint: Sites, Libraries & Permissions
  • Microsoft Teams: Teams, Channels & Policies
  • Users, Groups & Licensing
  • Zero Trust: Never Trust, Always Verify
  • Authentication: Passwords, MFA & Beyond
  • Microsoft Defender XDR
  • Microsoft Entra: Your Identity Hub
  • PIM, Audit Logs & Identity Governance

Domain 2: Data Protection & Governance

  • Microsoft Purview: The Big Picture
  • Sensitivity Labels & Data Classification
  • Data Loss Prevention (DLP)
  • Insider Risk & Communication Compliance
  • DSPM for AI & Data Lifecycle
  • How Copilot Accesses Your Data
  • Responsible AI Principles
  • Compliance Manager & eDiscovery
  • Activity Explorer & Data Monitoring
  • Oversharing in SharePoint

Domain 3: Copilot & Agent Admin

  • What is Microsoft 365 Copilot? Free
  • What Are Agents? Free
  • Copilot vs Agents: When to Use Which Free
  • Copilot Licensing: Monthly vs Pay-as-You-Go Free
  • Researcher, Analyst & Real-World Use Cases Free
  • Managing Copilot: Billing, Monitoring & Prompts Free
  • Building Agents: Create, Test & Publish Free
  • Agent Lifecycle: Access, Approval & Monitoring Free
Domain 3: Copilot & Agent Admin Free ⏱ ~10 min read

What is Microsoft 365 Copilot?

Microsoft 365 Copilot is an AI assistant built into the apps you already use. Let's break down what it actually does, how it works, and why every organisation wants it.

What is Copilot, really?

☕ Simple explanation

Think of Copilot as a really smart colleague who’s read every document in your organisation.

You know that person at work who always knows where things are? “Oh, the budget report? Sarah shared it in the Teams meeting last Tuesday. Here’s the link.” That’s Copilot — except it works inside Word, Excel, Outlook, Teams, and PowerPoint.

You type a question or give it an instruction, and it uses AI to help — summarise a meeting, draft an email, analyse data, or find that document you know exists but can’t find.

The key thing: Copilot only sees what YOU have permission to see. It doesn’t have a magic key to everything. If you can’t access the finance folder, neither can Copilot when it’s working for you.

Microsoft 365 Copilot is a generative AI assistant embedded across Microsoft 365 applications. It combines large language models (LLMs) with your organisation’s data in Microsoft Graph — emails, files, chats, calendars, and contacts — to provide contextual, permission-aware responses.

The architecture is called the Copilot System: the user’s prompt goes to an orchestration layer that grounds the LLM’s response in your Microsoft 365 data via the Microsoft Graph API. Importantly, Copilot respects existing access controls — it can only access data the user already has permissions to view.

Copilot is available in Word, Excel, PowerPoint, Outlook, Teams, OneNote, Loop, Whiteboard, and as a standalone chat experience (Microsoft 365 Copilot Chat). Each app surfaces Copilot capabilities relevant to that context.

What can Copilot actually do?

Here’s what Copilot does in each app — these are the built-in capabilities the exam tests:

AppWhat Copilot DoesExample
WordDraft, rewrite, summarise, change tone”Turn these bullet points into a professional report”
ExcelAnalyse data, create formulas, generate charts”What’s the trend in Q3 sales? Show me a chart”
PowerPointCreate presentations from prompts or documents”Create a slide deck from this Word document”
OutlookDraft replies, summarise email threads, coach tone”Summarise this 47-email thread in 3 bullet points”
TeamsSummarise meetings, catch up on chats, create action items”What did I miss in the last hour of this meeting?”
Copilot ChatCross-app queries using all your M365 data”What’s the latest update on Project Phoenix across all channels?”
💡 Real-world scenario: Northwave's first week with Copilot

Northwave Solutions (500 employees) just rolled out Copilot. Here’s what actually happened in week one:

  • Marketing used Copilot in Word to draft 3 blog posts in 2 hours (usually takes 2 days)
  • Finance used Copilot in Excel to find anomalies in expense reports that humans missed
  • HR used Copilot in Outlook to summarise 200+ applicant emails into a shortlist
  • IT (Maya) used Business Chat to find “who has access to the customer database?” across SharePoint, Teams, and Entra — in seconds instead of hours

The pattern: Copilot shines at tasks that involve finding, summarising, or creating content from existing organisational data.

Copilot features admins can control

As an admin, you don’t just deploy Copilot — you decide which features are available. The exam tests whether you know what can be enabled or disabled.

Copilot features and admin control points
FeatureCan Admin Disable?Where to Configure
Copilot in Word/Excel/PPTPer-user or groupM365 admin center
Copilot in Teams meetingsYesTeams admin center
Business Chat (web)YesM365 admin center
Web search (grounding)YesM365 admin center
Microsoft Graph accessIndirectly (via permissions)Entra + SharePoint
Copilot in OutlookPer-user or groupM365 admin center
ℹ️ Why would you disable a Copilot feature?

Common reasons admins disable specific features:

  • Web search grounding — some orgs don’t want Copilot pulling in external web data for compliance reasons
  • Teams meeting summaries — legal teams may have concerns about AI summarising sensitive discussions
  • Gradual rollout — enable for pilot group first (e.g., IT and Marketing), then expand company-wide

Exam tip: The exam often tests scenarios where an admin needs to disable ONE specific feature. Know which admin center controls what.

The Microsoft Graph connection

This is the concept that makes Copilot powerful AND the reason data governance matters:

Microsoft Graph is the API that connects all your M365 data — emails, files, chats, calendar events, contacts, sites. When you ask Copilot a question, it queries the Graph to find relevant information.

Key exam concept: Copilot doesn’t have its own copy of your data. It reads data through Microsoft Graph using the same permissions as the signed-in user. If Maya can’t access the finance SharePoint site, Copilot can’t access it when Maya is using it either.

This is why data governance matters so much for Copilot deployments. If your SharePoint permissions are a mess (everyone can see everything), Copilot will happily surface sensitive data to anyone who asks. This leads directly into Domain 2 — data protection.

🎬 Video walkthrough

🎬 Video coming soon

What is Microsoft 365 Copilot? — AB-900 Module 21

What is Microsoft 365 Copilot? — AB-900 Module 21

~8 min

Flashcards

Question

What is Microsoft 365 Copilot?

Click or press Enter to reveal answer

Answer

An AI assistant embedded across M365 apps (Word, Excel, PowerPoint, Outlook, Teams) that uses large language models + your organisation's data via Microsoft Graph to generate contextual, permission-aware responses.

Click to flip back

Question

How does Copilot access your organisation's data?

Click or press Enter to reveal answer

Answer

Through the Microsoft Graph API, using the same permissions as the signed-in user. Copilot can only see what you can see — it respects existing access controls.

Click to flip back

Question

Can an admin disable Copilot's web search grounding?

Click or press Enter to reveal answer

Answer

Yes. Admins can disable web search grounding in the M365 admin center. Some organisations disable this for compliance reasons — they only want Copilot to use internal data.

Click to flip back

Knowledge Check

Knowledge Check

Northwave Solutions deployed Microsoft 365 Copilot. Maya (the M365 admin) notices that Copilot in Teams is summarising confidential HR meetings. What should Maya check FIRST?

Knowledge Check

Brew & Byte wants to enable Copilot for their marketing team but NOT for the finance team during a pilot phase. Where does the admin configure this?

Knowledge CheckSelect all that apply

Which of the following statements about Microsoft 365 Copilot are TRUE? (Select TWO)


Next up: Copilot vs Agents — what’s the difference between built-in Copilot smarts and custom agents, and when would you use each?

← Previous

Oversharing in SharePoint

Next →

What Are Agents?

Guided

I learn, I simplify, I share.

A Guide to Cloud YouTube Feedback

© 2026 Sutheesh. All rights reserved.

Guided is an independent study resource and is not affiliated with, endorsed by, or officially connected to Microsoft. Microsoft, Azure, and related trademarks are property of Microsoft Corporation. Always verify information against Microsoft Learn.