AB-650 Exam Guide 2026: Administering Microsoft 365 and AI Services

Last updated: August 2026. Written and fact-checked by the Examinotion team against the official Microsoft Learn exam page and skills outline for AB-650.

TL;DR AB-650, Administering Microsoft 365 and AI Services, is a new Associate-level Microsoft exam, currently in beta, that leads to the Microsoft 365 Certified: AI Services Administrator Associate credential. It tests tenant administration, security and governance, and managing Copilot and agents. The passing score is 700 out of 1000.

The AB-650 exam is Microsoft's newest administrator certification, and it arrives at a moment when managing Microsoft 365 Copilot and AI agents has become a core part of the M365 admin role. If you administer a Microsoft 365 tenant and want a credential that reflects the AI governance work you now do every day, this guide walks through exactly what AB-650 covers, how it is scored, and how to prepare while it is still in beta.

What is the AB-650 exam?

AB-650 is a single exam that earns the Microsoft 365 Certified: AI Services Administrator Associate credential. Its full official title is "Exam AB-650: Administering Microsoft 365 and AI Services", and at the time of writing it carries a "(beta)" label on the Microsoft Learn exam page [1]. The associated certification is likewise labelled "(beta)" [2].

The exam validates that you can configure, manage, secure, and govern a Microsoft 365 tenant, its workloads, and the AI services layered on top of it, including Microsoft 365 Copilot and agents [1]. In Microsoft's own words, the audience "enable secure, compliant, and scalable productivity across the organization by governing data access, protecting information, and supporting collaboration between users and agents" [1].

AB-650 sits at Associate level, which means it is aimed at practitioners who already work with Microsoft 365 rather than complete beginners. There is no fundamentals-level barrier to booking it, but the content assumes real administrative experience, as the next section explains.

AB-650 at a glance

Here are the confirmed details from the official Microsoft Learn pages. Where Microsoft has not published a figure, this guide says so plainly rather than repeating a number from a third-party site.

A quick note on the missing rows. Microsoft does not routinely publish exact question counts, durations, or a single global price for its certification exams, and it has not done so for AB-650. Any specific "number of questions" or price you see quoted elsewhere is a third-party estimate, not an official figure, so treat it with caution.

Who should take AB-650?

AB-650 is designed for Microsoft 365 administrators who now manage AI services alongside traditional workloads. Microsoft describes the ideal candidate as someone who collaborates "with architects and administrators across workloads, infrastructure, identity, security, compliance, endpoints, and applications" [1].

The exam lists experience prerequisites rather than a required certification. Microsoft states that you should have "experience with Microsoft 365 workloads and Microsoft Entra ID, an understanding of Defender XDR capabilities, and familiarity with Microsoft Graph PowerShell" [1]. In practice, that means AB-650 suits you if you already do the following:

• Administer Microsoft 365 tenants, Exchange, Teams and SharePoint
• Manage identity, groups and Conditional Access in Microsoft Entra
• Work with Microsoft Purview for data protection and compliance
• Are starting to enable and govern Microsoft 365 Copilot and agents

If you are newer to the Microsoft Copilot ecosystem, you may want to build context first with a fundamentals-level exam. Our AB-900 exam guide covers Microsoft 365 Copilot and agent administration at fundamentals depth, which is a gentler on-ramp to the administrator-level material in AB-650.

AB-650 skills measured: the three domains

The AB-650 skills outline has three functional groups, and their weightings tell you where to focus. The official study guide and exam page agree on the following breakdown [1][3]:

The headline takeaway is that security and governance dominate. The two largest domains, governance and the AI services domain, together account for roughly three-quarters of the exam. If your day job leans towards tenant provisioning rather than security, that is where your preparation gap is most likely to be.

Configure and manage Microsoft 365 tenants and workloads (20-25%)

This domain covers the operational foundations of a Microsoft 365 tenant [3]. Expect questions on tenant branding, domains, organisational settings, and licence management, including how you assign the AI service licences for Microsoft 365 Copilot, Microsoft Agent 365 and Microsoft Copilot Studio [3].

It also covers workload administration: mailboxes, Teams channels, ownership and membership, Copilot settings in Teams meetings such as transcription, and SharePoint and OneDrive configuration for Copilot [3]. The SharePoint content includes SharePoint Advanced Management, Microsoft Search, and site exclusions, all of which affect what Copilot can and cannot surface.

Govern and secure Microsoft 365 tenants and workloads (40-45%)

This is the largest single domain, and it is where most candidates should concentrate. It spans identity, authentication, threat protection and data protection [3].

On identity, you need to manage users, guests and external access, groups, roles including Microsoft Entra Privileged Identity Management, administrative units, and bulk operations via Microsoft Graph PowerShell [3]. On authentication and access, the outline lists authentication methods, Entra Password Protection, self-service password reset, and Conditional Access, including Microsoft Entra ID Protection and multi-factor authentication [3].

Security coverage includes Microsoft Defender for Office 365 alerts, threat policies, investigating email and collaboration threats, and attack simulation training [3]. The data-protection section is where AI governance starts to appear: you must know Microsoft Purview data loss prevention across Exchange, SharePoint, OneDrive, Teams, endpoints and Copilot, sensitivity labels, data lifecycle management, and Purview Data Security Posture Management (DSPM) for AI activity [3]. If you want a deeper treatment of Copilot oversharing and Purview DSPM, our AB-900 data protection and governance guide unpacks those controls in detail.

Manage and secure AI services in Microsoft 365 (35-40%)

This domain is what makes AB-650 distinctive, and it is the reason the certification exists. It covers enabling and governing the AI layer of Microsoft 365 at an operational depth [3].

For Microsoft 365 Copilot, the outline includes tenant readiness assessment, data readiness to guard against leaks and oversharing, web search management, Microsoft 365 Copilot Search configuration, and tenant Copilot settings such as self-service purchase, release preferences, the AI disclaimer, and image or video generation [3]. It also lists Microsoft 365 Copilot Cowork, third-party AI providers, and Copilot connectors [3].

The agents content is newer still. You are expected to manage agent identity lifecycle through Microsoft Entra Agent ID, secure agent access with access packages and Conditional Access, and work with the agent registry to discover, review, publish, reject, install or block agents, including custom agent uploads [3]. A separate sub-skill covers securing and governing agents through Microsoft Agent 365, monitoring agent activity, protecting sensitive data, and evaluating compliance gaps [3]. Finally, you monitor AI services through cost management, Copilot usage reports in the Microsoft 365 admin centre, and the Copilot Control System [3]. If the idea of AI agents as governed enterprise objects is new to you, our Microsoft Copilot agents business guide gives useful background.

AB-650 and the MS-102 retirement: what we know

Microsoft has confirmed that Exam MS-102, Microsoft 365 Administrator, will retire in October 2026, at 11:59 PM Central Standard Time [4]. That is a firm, officially stated date on the MS-102 exam page.

Because AB-650 is a new Microsoft 365 administrator exam launching in the same year, many candidates and prep sites describe it as the "replacement" for MS-102. It is important to be precise here. On the official Microsoft Learn pages checked for this guide, the AB-650 exam page lists "Related exams: none", the MS-102 page also lists "Related exams: none", and neither certification page references the other [1][4]. In other words, Microsoft has not publicly designated AB-650 as the official successor to MS-102.

There is also a structural difference worth knowing. MS-102 feeds an Expert-tier credential that requires a separate associate-level certification as a prerequisite, whereas AB-650 is a standalone Associate exam with no certification prerequisite [4]. The two exams overlap heavily in subject matter, tenant administration, Entra identity, Defender and Purview, and their timing is suggestive, but treat any "AB-650 replaces MS-102" claim as an inference rather than a Microsoft statement. If you hold MS-102 or are mid-way through that path, plan around the confirmed October 2026 retirement date and watch the official pages for guidance.

AB-650 vs AB-900 vs AB-620: which certification fits you?

Examinotion sells preparation for several Microsoft AI certifications, and it helps to see where AB-650 sits among the administrator and builder exams. The comparison below is based on the public skills outlines and official titles [2][5][6]. It reflects Examinotion's reading of those outlines, not an official Microsoft pathway diagram.

The clearest distinction is between building and administering. AB-620 is a builder credential for people creating agents in Copilot Studio, so if your work is hands-on solution design, our AB-620 exam guide is the better starting point. AB-650 is an administrator credential for people who secure and govern the tenant, the Copilot rollout, and the agents other people build. AB-900 sits below both as a fundamentals-level primer.

What the beta status means for you

AB-650 is a beta exam, and beta exams work slightly differently from generally available ones. Microsoft states that "beta exams are not scored immediately because we're gathering data on the quality of the questions and the exam" [2]. You sit the exam as normal, but your result and any certification are issued later, once Microsoft has finalised scoring.

Two practical consequences follow. First, there is no official practice assessment yet. The exam page notes that "the practice assessment for this exam is not currently available" and that practice assessments usually appear "within 8 weeks of the exam being out of beta and generally available" [1]. Second, the content can still change while the exam is in beta, so always check the live skills outline before you book. If you want a fuller explanation of how beta scoring, timing and results work, our Microsoft beta exam guide covers the process end to end.

Beta exams are still worth sitting. They are often offered at a reduced price, and passing earns you the full certification once it goes generally available, frequently before most of the market has certified.

How to prepare for AB-650

Because AB-650 has no practice assessment yet and no published question count, your preparation should lean heavily on hands-on practice in a tenant plus the official skills outline. Here is a structured four to six week approach.

Weeks 1 to 2: tenant and workload foundations. Work through the first domain. Practise licence assignment for Copilot, Agent 365 and Copilot Studio, configure tenant settings, and set up SharePoint and OneDrive for Copilot, including Microsoft Search and site exclusions. Use a Microsoft 365 developer tenant if you do not have a lab environment.

Weeks 3 to 4: governance and security. This is the largest domain, so give it the most time. Drill Microsoft Entra identity, Conditional Access, Privileged Identity Management, Defender for Office 365, and Microsoft Purview DLP, sensitivity labels and DSPM for AI. Aim to configure each control at least once rather than only reading about it.

Weeks 5 to 6: AI services and agents. Enable Microsoft 365 Copilot in a test tenant, run a readiness and data-readiness assessment, and configure tenant Copilot settings. Then work through agents: Microsoft Entra Agent ID, the agent registry, Agent 365 governance, and Copilot usage monitoring through the Copilot Control System.

Throughout, verify every fact against the official study guide at learn.microsoft.com [3], and never rely on so-called exam dumps. Reproducing real exam questions breaches the Microsoft certification agreement, and dump content is frequently wrong. Practising with legitimate, exam-aligned question sets is a safer way to test your readiness. You can compare Examinotion's approach across the full Microsoft AI exam catalogue.

Frequently Asked Questions

Is AB-650 replacing MS-102?

Microsoft has not officially stated that AB-650 replaces MS-102. On the official Microsoft Learn pages, both exams list "related exams: none" and neither references the other. MS-102 is confirmed to retire in October 2026, and AB-650 covers overlapping subject matter, but the "replacement" label is an inference, not a Microsoft statement.

What is the passing score for AB-650?

The AB-650 passing score is 700 on a scale of 1000, as stated on both the official exam page and the certification page. Microsoft scores are scaled rather than a simple percentage, so 700 does not mean 70% of questions correct. Our guide to what a Microsoft passing score really means explains the scaling.

Do I need a certification before taking AB-650?

No certification is required before AB-650. Microsoft lists only experience prerequisites: familiarity with Microsoft 365 workloads and Microsoft Entra ID, an understanding of Defender XDR capabilities, and familiarity with Microsoft Graph PowerShell. AB-650 is a standalone Associate exam, unlike the Expert-tier path that MS-102 feeds, which requires a prior associate certification.

How many questions are on the AB-650 exam?

Microsoft does not publish an exact question count for AB-650, and it rarely publishes counts for any certification exam. Any specific number you find online is a third-party estimate rather than an official figure. Focus your preparation on the three published skills domains and their weightings instead of a question count.

What is Microsoft Agent 365 and why is it on the exam?

Microsoft Agent 365 is the governance and control layer for AI agents in Microsoft 365. AB-650 covers it because administrators must secure and govern agents as enterprise objects: managing agent identity through Microsoft Entra Agent ID, controlling agent access, and monitoring agent activity and compliance. It sits inside the "manage and secure AI services" domain.

Is it worth taking AB-650 while it is still in beta?

Sitting AB-650 in beta can be worthwhile. Beta exams are often discounted, and passing earns the full certification once it becomes generally available, so you can certify ahead of the market. The trade-offs are that results are delayed while Microsoft finalises scoring, no official practice assessment exists yet, and the skills outline may still change.

Conclusion

AB-650 formalises a role that has quietly become central to Microsoft 365 administration: governing not just mailboxes and identities, but Copilot, agents and the AI services that now run across the tenant. With security and governance making up the bulk of the exam and a dedicated AI services domain covering Copilot, Agent 365 and the Copilot Control System, it is a genuinely modern administrator credential. Its beta status means a little extra diligence, checking the live outline and accepting delayed scoring, but it also means the chance to certify early.

If AB-650 fits your role, the best next step is structured, exam-aligned practice. Browse Examinotion's Microsoft AI exam preparation catalogue to start preparing for the administrator and Copilot certifications that matter to your career.

Sources

1. Exam AB-650: Administering Microsoft 365 and AI Services (beta) — Microsoft Learn, accessed 2026-08-12
2. Microsoft 365 Certified: AI Services Administrator Associate (beta) — Microsoft Learn, accessed 2026-08-12
3. Study guide for Exam AB-650 — Microsoft Learn, accessed 2026-08-12
4. Exam MS-102: Microsoft 365 Administrator — Microsoft Learn, accessed 2026-08-12
5. Study guide for Exam AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals — Microsoft Learn, accessed 2026-08-12
6. Study guide for Exam AB-620: Designing and Building Integrated AI Solutions in Copilot Studio — Microsoft Learn, accessed 2026-08-12