Professional Training

Course Description

The course covers the administration, security, governance, monitoring, and optimisation of Microsoft 365 and AI services. Delegates work across tenant and licence management, Microsoft Entra, Exchange Online, Teams, SharePoint, OneDrive, Microsoft 365 Copilot, AI agents, Microsoft Defender for Office 365, and Microsoft Purview. Practical exercises use realistic scenarios to reinforce configuration, troubleshooting, rollout, protection, governance, reporting, and cost-management tasks.

Who Should Attend

The course is suitable for professionals who administer or govern Microsoft 365 and AI environments, including:
- Microsoft 365 administrators
- AI services administrators
- Security administrators
- Compliance administrators
- Cloud administrators
- Other professionals responsible for Microsoft 365 and AI services

Key Learning Outcomes

By the end of the course, delegates should be able to:
- Provision, brand, and configure a Microsoft 365 tenant using least-privilege administration.
- Assign and troubleshoot Microsoft 365 and AI service licences, including pay-as-you-go billing.
- Maintain tenant resilience by configuring backup, monitoring service health, diagnosing connectivity, and reviewing adoption.
- Administer Exchange Online, Microsoft Teams, SharePoint, and OneDrive workloads for secure collaboration and Copilot use.
- Manage users, guests, groups, administrative units, privileged roles, authentication methods, and Conditional Access in Microsoft Entra.
- Protect email and collaboration services with Microsoft Defender for Office 365 and investigate threats and alerts.
- Classify and protect information, apply data loss prevention, and govern the data lifecycle with Microsoft Purview.
- Assess Copilot readiness, plan a phased rollout, and configure tenant settings, search, connectors, and third-party AI providers.
- Establish agent identities, ownership, access controls, registry processes, approved tools, and lifecycle governance.
- Monitor Microsoft 365 Copilot and agent adoption, effectiveness, service health, and cost across available reporting surfaces.

Provision and Brand a Microsoft 365 Tenant

Understand the Microsoft 365 Tenant
Assign Least-Privilege Administrator Roles
Add and Verify a Custom Domain
Exercise - Delegate Domain Administration and Add a Custom Domain
Configure Organisation Branding Across Two Portals
Exercise - Configure Organisation Branding
Configure Organisational Settings
Exercise - Configure Organisational Settings

License Microsoft 365 and AI Services at Scale

Assign and Manage Microsoft 365 Licenses
Verify and Troubleshoot License Assignments
Exercise - Assign, Verify, and Troubleshoot Microsoft 365 Copilot Licensing for Relecloud's Marketing Rollout
License AI Services for the Right Populations
Understand how Microsoft 365 Billing is Structured
Set up Pay-As-You-Go Billing for AI-service Usage
Exercise - Configure Pay-As-You-Go Billing for Relecloud's Copilot Studio Pilot Team

Keep a Microsoft 365 Tenant Resilient and Healthy

Configure Microsoft 365 Backup for Critical Workloads
Exercise - Configure Backup for Relecloud's Critical Workloads
Monitor Service Health and Configure Notifications
Diagnose Network Connectivity Issues Affecting Copilot
Exercise - Diagnose Relecloud's Satellite-Office Copilot Connectivity Failure
Monitor Microsoft 365 Usage and Adoption
Exercise - Interpret Relecloud's Copilot Adoption Data
Recognise the Endpoint and Client-Management Ecosystem

Configure Exchange Online and Microsoft Teams Workloads

Create and Manage Mailboxes
Delegate Mailbox Access: Full Access, Send as, and Send on Behalf
Exercise - Configure Relecloud Shared Mailboxes and Delegate Access
Understand how Mail Routes Through Exchange Online
Create and Manage Teams, Channels, Owners, and Members
Configure Copilot in Teams Meetings
Exercise - Build a Copilot-ready Team for Relecloud's Account Managers

Govern SharePoint and OneDrive for Microsoft 365 Copilot

Create and Manage SharePoint Sites
Set the Boundary: SharePoint and OneDrive Sharing Settings
Find Overshared Sites Before Copilot does
Exercise - Set up and Audit a Governed SharePoint Site
Hide it from Search, Not from Access: Restricted Content Discovery
Lock it Down for Real: Restricted Access Control
Temporary Allow-List for Rollout: Restricted SharePoint Search
Choose the Right Control for the Job
Exercise - Remediate the Finance Site and Choose the Right Control

Provision and Govern Identities in Microsoft Entra

Manage the User and Contact Lifecycle
Perform Bulk Identity Management with Microsoft Graph PowerShell
Exercise - Bulk-provision Relecloud's New-Hire Users with Microsoft Graph PowerShell
Manage Guests and External Collaboration
Create and Manage Groups, Naming Policy, and Expiration Policy
Scope Delegated Administration with Administrative Units
Exercise - Scope Relecloud's Regional HR Admin with an Administrative Unit
Govern Roles with Role Groups and Privileged Identity Management
Exercise - Configure a PIM Approval Workflow for Relecloud Privileged Role

Implement Authentication and Access in Microsoft Entra

Evaluate and Scope the Authentication Method Catalog
Enforce Password Protection for Cloud Accounts
Enable and Troubleshoot Self-Service Password Reset
Exercise - Scope Authentication Methods and Enable SSPR for Relecloud's Engineering Team
Evaluate Conditional Access Policies and Client App Conditions
Investigate and Resolve Authentication Issues
Resolve Sign-In Risk and Device Compliance in Conditional Access
Exercise - Build and Verify a Risk-Based, Device-Compliant Conditional Access Policy

Secure Email and Collaboration with Microsoft Defender for Office 365

Configure Threat Policies: Presets, Custom Policies, and Precedence
Configure the Settings Inside Each Threat Policy
Extend Protection to Teams, SharePoint, and OneDrive
Exercise - Configure and Scope Threat Protection for Relecloud's Finance Team
Manage Alerts and Investigate Threats
Remediate and Reduce Human Risk: AIR and Attack Simulation Training
Exercise - Investigate a Threat and Reduce Human Risk with Attack Simulation Training
Coordinate with the Broader Microsoft Defender Security Estate

Protect Information with Microsoft Purview Information Protection

Choose a Classification Technique for a Data Shape
Exercise - Create a Custom Sensitive Information Type for Woodgrove's Transaction Pattern
Design What a Sensitivity Label Protects
Publish Label Policies and Resolve Conflicting Settings
Exercise - Configure and Publish a Sensitivity Label Policy, then Verify Priority Resolution
Verify Classification is Working with Purview Reporting
Verify Classification Supports Safe Copilot Grounding

Prevent Data Loss and Govern the Data Lifecycle with Microsoft Purview

Specify DLP Requirements Across Microsoft 365 Locations
Exercise - Create a DLP Policy for Microsoft 365 Copilot
Attribute DLP Alerts Across AI Apps and Agents
Respond to DLP Alerts in Microsoft Defender XDR
Exercise - Review a DLP Alert in Microsoft Defender XDR
Specify Data Lifecycle Management Requirements
Monitor AI Activity and Oversharing Risk with DSPM for AI
Exercise - Review a DSPM for AI Data Risk Assessment
Recognise the Broader Microsoft Purview Governance Surface

Assess Readiness and Roll Out Microsoft 365 Copilot

Assess Tenant Readiness for a Copilot Rollout
Exercise - Run and Interpret the Copilot Readiness Report
Identify and Resolve Data-Readiness Issues
Exercise - Remediate an Oversharing Risk Before Rollout
Plan a Phased Rollout Across the Organisation
Exercise - Stage a Phased Pilot Rollout Group

Configure Microsoft 365 Copilot Settings and Extensibility

Configure the Copilot Tenant-Settings Catalog
Exercise - Configure the Copilot Settings Catalog
Manage Web Search for Copilot and Copilot Chat
Configure Copilot Search
Exercise - Configure Web Search and Copilot Search
Manage Third-Party AI Providers
Exercise - Enable a Third-Party AI Provider
Configure Copilot Connectors
Govern SharePoint AI Skills and the Frontier Program

Establish Agent Identities and Secure Access with Microsoft Entra Agent ID

Understand the Microsoft Entra Agent ID Object Model
Assign a Sponsor and a Least-Privilege Owner
Exercise - Assign a Sponsor and Owner to an Agent Identity
Automate Sponsor Transfer with Lifecycle Workflows
Exercise - Configure a Sponsor-Transfer Lifecycle Workflow
Apply Conditional Access to Agent Identities and Choose the Right License
Exercise - Apply Conditional Access to an Agent Identity Blueprint

Curate and Control Agents with the Agent Registry and Agent 365 Tools

Review, Approve, and Block Tools for Agents
Exercise - Review, Approve, and Block a Tool
Govern Bring Your Own MCP Servers
Exercise - Review a Bring Your Own Model Context Protocol (MCP) Server Registration
Perform Ongoing Agent Registry Curation
Exercise - Reassign an Active Agent's Owner
Audit the Agent Estate by Publisher and Channel

Monitor and Manage Agents with Microsoft Agent 365

Introduction to Microsoft Entra Agent ID
Monitor and Manage Agents
Scenario
Exercise - Monitor Agents from the Overview Page
Exercise - Monitor Agents Inventory in Registry
Exercise - Monitor Agents Using the Agent Map
Exercise - View Agents with Exceptions and Take Action
Exercise - Measure Agent Effectiveness
Exercise - Monitor Connected Platforms

Govern Agents Using Agent 365

Govern Agents Scenarios
Exercise - Set up Agent Settings and Access
Security and Governance Policies
Exercise - Set up Policy Template
Exercise - Set up Permissions Using Access Packages
Exercise - Onboard an Agent
Exercise - Deploy and Activate Agents
Exercise - Assign Owners to Agents to Prevent Agent Sprawl
Exercise - Block Agents with Security Risks
Exercise - Use Rules and Automate Agent Management
Manage Tools
Exercise - Activate and Manage Tools
View Audit Logs

Monitor and Optimise Microsoft 365 AI Services

Pick the Right Report Source for a Copilot Adoption Question
Exercise - Pick the Right Report Source
Read the Copilot Usage Report and the Agent Usage Report
Exercise - Read the Copilot Usage Report and the Agent Usage Report
Reconcile Copilot and Agent Costs Across Surfaces
Exercise - Reconcile Copilot and Agent Costs Across Surfaces
Assess AI-service Health with the Copilot Control System