9.1 Microsoft 365 Admin Center and Reports

Quick Answer: Sign in at admin.microsoft.com (also admin.cloud.microsoft). Users and Billing handle people and licenses. Health splits Service health (what is broken now) from Message center (what is changing next). Reports > Usage shows tenant-wide activity — email, active users, files, Teams — so you can see who uses a license and who does not. Give people the least-privileged role that fits the job, not Global Administrator by default.

The April 30, 2025 MS-900 outline asks you to describe the capabilities of the Microsoft 365 admin center and the reports available. This is a “which portal, which blade, which role?” skill. You will not be asked to click every left-nav item or to write a Graph report query. You will be asked whether adding a user, reading next month’s Teams change, and checking whether anyone still uses Exchange are the same place. They are related — they all start in this admin center — but they are not the same page.

What the admin center is for

The Microsoft 365 admin center is the common entry point for people who manage a Microsoft 365 tenant. Official Learn language is blunt: it is where you add and remove users, change licenses, reset passwords, check billing, watch service health, and open activity reports. You reach it by going to admin.microsoft.com, or, if you are already signed in at microsoft365.com, by opening the app launcher and choosing Admin. That Admin tile appears only when the signed-in account has an administrator role. A standard employee who can open Word in the browser is not in the admin center.

The center has two views. Simplified view is aimed at smaller organizations and surfaces a short list of common tasks — add a user, reset a password, look at products. Dashboard view is the fuller console most enterprise admins see, with a customizable home of cards and the complete left navigation. You can switch views from a control at the top. MS-900 does not grade you on which cards you pin. It grades you on knowing that this site is the tenant console, not the user portal you will study in the next section.

Do not memorize every blade. Learn the jobs that official overview documentation groups together:

Settings and Setup exist — domains, password policy, organization profile, release preferences, turning on features that shipped with the subscription — but they are supporting rooms, not the exam’s main hallway. Roles is where you assign Microsoft Entra built-in roles so other people can work in this center and in the specialist centers without becoming Global Administrator.

Users, groups, licenses, and billing

A user in this console is a work or school identity in the tenant: an employee, a student, or a similar account you create. From Users > Active users an admin adds a person, sets the usage location, and assigns a product license in the same wizard. You can also delete a user, restore one from the recycle bin, and reset a password. License counts — how many you own versus how many you assigned — live under Billing > Licenses. Official usage-report documentation points you to those two places when the question is “who is licensed?” rather than “who used Outlook yesterday?”

Groups are not a second copy of Active Directory that you ignore. Teams and groups is where you create a Microsoft 365 group (mailbox plus SharePoint site plus, often, a team), a distribution group (email a list), a security group (grant access), or a shared mailbox. The exam wants the admin center as the place you start, not a 20-step group-naming policy.

Billing is the commercial doorway: view statements, add seats, cancel a trial, see which subscription a license came from. Buying a subscription is not the same as assigning that license to Adele. Purchase is Billing; assignment is Users (or group-based licensing, which you will meet later as a licensing skill, not as an admin-center tour).

Health: Service health is not Message center

Health is one menu with two different stories.

Service health answers “is the service working for my tenant right now?” It shows active incidents, advisories, and a history you can use when users say Outlook is slow. Chapter 15 returns to service health in both this admin center and the Microsoft Entra admin center. For this skill, remember the question it answers: current status.

Message center (Health > Message center) is Microsoft’s change-management inbox for the tenant. Official admin documentation says it helps IT track upcoming changes, feature updates, planned maintenance, and required actions. Posts are tagged — major update, new feature, retirement, data privacy, admin impact, user impact — and can carry an Act by date when you must do something to avoid disruption. Major updates that need action are communicated at least 30 days in advance. Admins can filter by service, mark favorites, archive noise, share a post, and subscribe to a weekly digest. Message center is not a live outage board and it is not visible in the end-user portal.

If the stem says “Exchange is degraded this morning,” think Service health. If the stem says “Microsoft is retiring a feature next quarter and wants admins to plan,” think Message center.

Roles: Global Administrator is not a job title for everyone

Anyone who signs up for the first Microsoft 365 subscription becomes a Global Administrator. That role can touch almost every admin setting and a great deal of data. Microsoft’s own admin-role guidance is the scoring key: use the fewest permissions, keep the Global Administrator count small, and require multifactor authentication for admins. A Global Administrator can lock themselves out; another Global Administrator or a Privileged Authentication Administrator can recover that account — which is why “have exactly one Global Administrator forever” is also a bad design.

MS-900 wants the idea of least privilege, not a recitation of every Microsoft Entra role. Map the everyday jobs:

• User Administrator — create and manage most users, assign licenses, reset many passwords, watch service health.
• License Administrator — assign and remove licenses and edit usage location without owning the whole user object model.
• Billing Administrator — purchases, subscriptions, invoices, service health.
• Helpdesk Administrator — password resets and sign-out for non-admin users; service requests.
• Reports Reader — usage data and activity reports without the right to create users or buy seats.
• Exchange / SharePoint / Teams Administrator — the matching specialist admin center.
• Global Reader — look but do not change, across what a Global Administrator can see.

If someone only needs to read whether Teams is being used, Reports Reader is the answer. If someone only resets passwords for staff, Helpdesk Administrator or Password Administrator is the answer. “Make them Global Administrator so they can see the report” is the trap.

Reports > Usage: the tenant-wide adoption picture

Reports > Usage is the Microsoft 365 admin center’s activity dashboard. Official Learn text: these reports show how people in the organization use Microsoft 365 business services — who uses a service thoroughly and who barely uses it and might not need a license. Usage reports do not include perpetual Office licenses sitting on a disk.

Typical windows are the last 7, 30, 90, or 180 days. Data is not instant. Microsoft’s overview says reports usually appear within 24 to 72 hours and can take several days. The last-activity date on a user, group, or site is the most recent intentional action, not “whatever day you picked on the chart.”

You do not need every report name. You do need the families the exam will recognize:

Copilot readiness and Copilot usage reports also appear on this Usage page in current tenants. Treat them as IT-facing adoption numbers in the same admin center. The Microsoft Copilot Dashboard that leaders open in Viva Insights is a different surface — section 9.4.

By default, reports conceal user names, group names, and site URLs so organizations can honor local privacy rules. A Global Administrator can turn identifiable names back on under Settings > Org settings > Reports if policy allows. That same privacy switch also applies to Microsoft Graph usage reports, Power BI usage analytics, and several Teams admin center reports. Export to Excel, Power BI, or the Microsoft Graph reports API is how you work with thousands of rows; you cannot type one user name into a magic search box and get every service they touch.

Roles that can view usage reports include Global Administrator, Exchange / SharePoint / Teams Administrator, Reports Reader, Usage Summary Reports Reader (no user details), and related reader-style roles. You do not need Global Administrator just to see the charts.

These tenant-wide usage reports are not the mail-flow, PSTN, or per-site governance reports that live in the Exchange, Teams, and SharePoint admin centers. If the question is “how many people used email last month,” stay here. If the question is “why did this inbound message fail” or “how many PSTN minutes did Calling Plans burn,” you will change admin centers in section 9.3.

Realistic exam-style scenarios

New hire. HR asks IT to create Adele Vance, give her Microsoft 365 Business Standard, and email her a temporary password. That is Users > Active users in the Microsoft 365 admin center, not office.com and not the SharePoint admin center.

Shelfware. Finance wants to know whether 200 Frontline licenses are actually used. Open Reports > Usage, start with Active users and the product-specific activity reports, then confirm owned-versus-assigned counts under Billing > Licenses. Do not use Message center for that question.

Change versus outage. Users cannot open Outlook this morning — Service health. Microsoft posted that a Teams meeting feature will change in 40 days and admins should update training — Message center.

Least privilege. A business analyst should see adoption charts and must not reset passwords or buy subscriptions. Assign Reports Reader, not Global Administrator.

Wrong door. A user who only needs Word and OneDrive should not be sent to admin.microsoft.com. They belong in the user portal (next section). An Exchange admin who needs non-delivery trends will leave this center through Admin centers and open the Exchange admin center.

Exam traps

• admin.microsoft.com is not office.com. The Admin tile is for people with an admin role.
• Message center is not Service health. One is upcoming change; the other is current incident status.
• Usage reports are delayed and often anonymized. They are not a live per-user keystroke feed, and they are not perpetual-Office inventory.
• Do not make everyone Global Administrator. Reports Reader, User Administrator, and License Administrator exist on purpose.
• Do not treat Reports > Usage as the only reporting surface in Microsoft 365. SharePoint, Teams, and Exchange keep their own operational reports.
• Do not study every left-nav blade. Users, groups, licenses, billing, health, and usage reports are the MS-900 core.

Official sources

• Overview of the Microsoft 365 admin center — users, billing, reports, health, specialist admin centers
• About administrator roles — Global Administrator versus least-privileged roles
• Microsoft 365 admin center usage reports overview — available reports, time windows, privacy, roles
• Microsoft 365 apps Active users report — product-level active users
• Message center — upcoming changes versus service health
• Study guide for Exam MS-900 — admin center and reports skill