M365 Licensing and Admin Centers
Key Takeaways
- Microsoft 365 Copilot requires a qualifying base license (E3/E5, Business Standard/Premium, or Office 365 E3/E5) plus the Copilot add-on assigned under Active users > Licenses and apps.
- E5 includes advanced Purview capabilities (Insider Risk, Communication Compliance, DSPM for AI) that E3 lacks — a common AB-900 licensing trap.
- The Microsoft 365 admin center handles user licensing, org-wide Copilot settings, billing, and the Copilot Usage Report.
- Each workload has a dedicated admin center: Exchange, SharePoint, Teams, Entra, Purview, and Power Platform.
- The Copilot Administrator role provides least-privilege access to Copilot settings without Global Administrator privileges.
Quick Answer: Microsoft 365 licensing determines which features, admin centers, and governance tools are available. Copilot requires a qualifying base license plus the Copilot add-on. Admins manage users, billing, and org-wide settings primarily through the Microsoft 365 admin center, with workload-specific portals for Exchange, SharePoint, Teams, Entra, and Purview.
Licensing is the gatekeeper for every AB-900 scenario. Before a user can open Copilot in Word or before an admin can enable Insider Risk Management, the tenant must hold the right subscription SKU. AB-900 tests whether you can match a business requirement to the correct license tier and identify which admin center configures the setting.
Microsoft 365 License Families
| License Family | Typical Audience | Key Differentiator for AB-900 |
|---|---|---|
| Microsoft 365 Business Basic/Standard/Premium | Small and midsize businesses | Business Premium adds Intune and advanced security; Copilot requires Business Standard or Premium as a base |
| Microsoft 365 E3 | Enterprise departments | Full M365 apps, basic DLP, sensitivity labels; lacks several advanced Purview AI governance tools |
| Microsoft 365 E5 | Enterprise with compliance needs | Adds Insider Risk Management, Communication Compliance, advanced audit, and DSPM for AI capabilities |
| Office 365 E3/E5 | Exchange/SharePoint-focused enterprises | Qualifying base for Copilot add-on; fewer security and compliance features than M365 E3/E5 |
On the Exam: When a scenario describes Insider Risk Management, Communication Compliance, or DSPM for AI, the answer often implies Microsoft 365 E5 (or an equivalent add-on license). E3 provides basic DLP and sensitivity labels but not the full AI governance toolkit AB-900 emphasizes.
Microsoft 365 Copilot Licensing
Microsoft 365 Copilot is a per-user add-on license assigned separately from the base subscription:
- User must hold a qualifying base license — Microsoft 365 E3/E5, Business Standard/Premium, or Office 365 E3/E5.
- Admin assigns the Microsoft 365 Copilot add-on under Active users > Licenses and apps in the Microsoft 365 admin center.
- Only licensed users can access Copilot features in Word, Excel, PowerPoint, Outlook, Teams, and other integrated apps.
Microsoft also offers pay-as-you-go Copilot billing as an alternative to per-user monthly licenses. Consumption is metered based on actual usage, and admins manage billing policies in the Microsoft 365 admin center to control cost exposure for pilot or variable workloads. AB-900 tests that you know where licenses are assigned (Active users) versus where tenant-wide Copilot settings live (Settings > Org settings > Copilot).
The Microsoft 365 Admin Center
The Microsoft 365 admin center (admin.microsoft.com) is the primary hub for tenant-wide administration:
| Area | What Admins Do Here | AB-900 Relevance |
|---|---|---|
| Home | Service health summary, setup tasks, recommendations | Quick tenant health checks |
| Users > Active users | Create users, assign licenses, reset passwords | Copilot license assignment |
| Billing | Purchase services, view invoices, manage subscriptions | Acquire Copilot seats or pay-as-you-go |
| Settings > Org settings | Tenant-wide Copilot options (e.g., web grounding) | Org-wide AI policy controls |
| Reports | Adoption Score, Copilot Usage Report, license details | Measure Copilot ROI and adoption |
| Roles | Assign admin roles including Copilot Administrator | Least-privilege administration |
| Health > Service health | Active incidents and planned maintenance | Distinguish from usage analytics |
| Health > Message Center | Planned feature changes and deprecations | Stay current on Copilot updates |
Common Trap: The Copilot Usage Report (Reports) shows adoption metrics. Service Health monitors availability incidents. Adoption Score measures overall M365 productivity across all workloads — not Copilot-specific usage. AB-900 distractors often swap these three.
Workload-Specific Admin Centers
Each major Microsoft 365 workload has a dedicated admin portal:
| Admin Center | URL Pattern | Primary Objects |
|---|---|---|
| Exchange admin center | admin.exchange.microsoft.com | Mailboxes, distribution groups, mail flow |
| SharePoint admin center | admin.microsoft.com/sharepoint | Sites, sharing policies, storage quotas |
| Teams admin center | admin.teams.microsoft.com | Teams policies, apps, meetings, messaging |
| Microsoft Entra admin center | entra.microsoft.com | Users, groups, Conditional Access, roles |
| Microsoft Purview portal | compliance.microsoft.com | DLP, sensitivity labels, Insider Risk, audit |
| Power Platform admin center | admin.powerplatform.microsoft.com | Copilot Studio agents, environments, DLP |
AB-900 expects you to route a scenario to the correct portal. Mailbox delegation issues go to Exchange. Overshared site links go to SharePoint (and Purview reports). Agent deployment governance spans M365 admin center and Power Platform admin center.
Admin Roles and Least Privilege
Microsoft Entra provides role-based admin access. Key roles for AB-900:
- Global Administrator — full tenant control; avoid for daily Copilot tasks.
- Copilot Administrator — purpose-built for Copilot settings, usage policies, and configurations without Global Admin privileges.
- Compliance Administrator — manages Purview DLP, retention, and eDiscovery.
- SharePoint Administrator — manages sites, sharing, and storage.
- Teams Administrator — manages Teams policies and app permissions.
On the Exam: When a stem asks for the least-privilege role to manage Copilot settings, the answer is Copilot Administrator, not Global Administrator.
Admin Center vs Purview: A Decision Framework
| If the task involves... | Start in... |
|---|---|
| Assigning a license to a user | M365 admin center > Active users |
| Blocking legacy authentication | Entra admin center > Conditional Access |
| Creating a DLP policy for Copilot | Microsoft Purview compliance portal |
| Changing tenant-wide Teams meeting policies | Teams admin center |
| Reviewing overshared SharePoint sites | Purview / SharePoint access governance reports |
| Publishing a custom Copilot Studio agent | Power Platform admin center + M365 admin center |
Knowing which door to open saves time on the exam and in production.
Where do administrators assign the Microsoft 365 Copilot add-on license to an individual user?
Which license tier includes advanced Purview capabilities such as Insider Risk Management and DSPM for AI that AB-900 emphasizes?
Which admin center report shows Copilot-specific active users and feature-level adoption?
Which role is purpose-built for managing Copilot settings with least privilege?