AB-900: Microsoft 365 Copilot and Agent Administration FundamentalsDemo

Group-based licensing assigns the group’s product licenses to its members, so adding User1 to Group1 provides the Microsoft 365 E3 license. A Microsoft 365 E3 license can alternatively be assigned directly to User1. Conditional Access policies govern the conditions under which access is allowed and do not grant product-license entitlements.

Microsoft Purview Insider Risk Management detects, investigates, and helps mitigate risky insider activity. Its Data theft by departing users policy template detects suspicious activity associated with potential data theft or exfiltration by users who are leaving the organization. Microsoft Learn: Insider Risk Management

The code interpreter capability enables a Microsoft 365 Copilot agent to analyze Excel data and create graphs, charts, and other data visualizations using generated Python code in a sandboxed environment.

Activity explorer collects DLP policy match events from workloads including Teams chat and channels, so an administrator can drill into the specific external-sharing incident to see who shared what, when, where, and which sensitive information type triggered the match. Content explorer instead shows a current snapshot of items already carrying a label or sensitive information type across data stores, rather than a record of a specific past sharing event.

Zero Trust rests on three principles: verify explicitly, use least-privileged access, and assume breach, so every request is authenticated and authorized rather than trusted by default. Treating traffic from the corporate network as inherently trustworthy or reducing authentication prompts and access reviews runs counter to this model.

Sensitivity-label configuration is managed in the Microsoft Purview portal, under Information Protection > Sensitivity labels. The label list there lets administrators open a label and view its configured settings; SharePoint only displays the label assigned to the document.

The Microsoft 365 admin center is used to assign or remove Microsoft 365 licenses for users, including through the Active users and Licenses pages.

Failed sign-in attempts are logged in Microsoft Entra (formerly Azure AD) admin center, accessible via the Identity > Monitoring & health > Sign-in logs path or via individual user sign-in logs. These logs show authentication failures, multi-factor authentication failures, and other sign-in issues. Other admin centers (Microsoft 365, Defender, Purview) do not provide detailed sign-in diagnostics.

The Analyst agent in Microsoft 365 Copilot is specifically designed to work across multiple data files simultaneously, performing advanced data analysis including trend identification, generating charts and visual insights automatically, surfacing anomalies and patterns, and producing written summaries of findings. This directly matches the stated requirements for identifying performance trends, generating visual insights, and summarizing anomalies across multiple datasets.

Scheduling a prompt in Microsoft 365 Copilot requires first submitting the prompt and receiving a response; only then does the "Schedule this prompt" option appear, letting you set its recurrence, including a midnight run time. Saving a prompt, creating an agent, or building a notebook does not by itself surface the scheduling option.