AB-900 Prerequisites: What to Know First

The short version

Microsoft’s AB-900 pages list no required prerequisite exam or certification. They do describe the audience: you should be familiar with Microsoft 365, including core services, security, identity and access, data protection, and governance, along with Microsoft 365 Copilot and agents. That profile is a recommendation, not a gate.

Required versus recommended

Required: nothing is listed. You do not need another certification, and you can book the exam directly.

Recommended by Microsoft’s audience profile:

  • Familiarity with the admin centers for Exchange Online, SharePoint, Teams, Microsoft Entra, and Microsoft Purview.
  • Experience with AI-driven productivity tools and modern IT management practices.
  • Knowledge of core Microsoft 365 objects: users, groups, teams, sites, and libraries.
  • Understanding of core security features: authentication methods, Conditional Access, and single sign-on.

Skills self-check

Read the list and mark what you could explain to a colleague today.

  • I can describe the difference between a user, a group, a team, and a site.
  • I know where a license is assigned and what happens to access when it is removed.
  • I can explain Zero Trust in a few sentences.
  • I can explain authentication versus authorization.
  • I know what Conditional Access and single sign-on do.
  • I can say when to use a sign-in log, an audit log, or a Purview audit search.
  • I know what a sensitivity label, a DLP policy, and a retention label each do.
  • I can explain why oversharing is a Copilot risk.
  • I know the difference between a prebuilt agent and a custom agent.
  • I know the idea of per-user licensing versus pay-as-you-go billing.

If you ticked seven or more, you can start studying the exam directly. If you ticked fewer than four, spend a week on the basics first. Between four and six, follow the 8-week version of the study plan.

What to learn before you start

  1. Microsoft 365 basics. Know what Exchange, SharePoint, Teams, and OneDrive store and how groups tie them together.
  2. Identity basics. Learn what Microsoft Entra ID is and why sign-in policies exist.
  3. Data governance vocabulary. Terms such as classification, label, retention, and sharing link appear constantly. The glossary helps with general terms.
  4. Copilot concepts. Learn at a high level how Copilot uses your data and permissions.

Suggested preceding certifications

Microsoft’s AB-900 pages do not name a preceding certification, so we do not suggest one as a requirement. Other fundamentals-level Microsoft exams cover related ground, but each has its own skills list, so compare the study guides before relying on them.

More guides for AB-900

Next step

Check the exam format, then use the domains explained page to see what each domain expects. When you want to test your starting point, try the AB-900 practice tests.

Frequently asked questions

Do I need Copilot experience?

Microsoft expects familiarity with Copilot and agents, but not expert-level use.

Do I need to code?

No coding is listed in the skills measured.

Can a student take it?

Yes. Microsoft lists Certiport scheduling for students and educators.

Try the AB-900 practice exams