AB-650 vs AB-900: Which Microsoft 365 Copilot and Agent Certification to Take, and in What Order

Take AB-900 if you need to recognise how Microsoft 365, Purview and Copilot fit together. Take AB-650 if you already administer a tenant and now have to configure, secure and govern Copilot and agents inside it. AB-650 is in beta as of August 2026. Neither exam requires the other.

The two credentials, side by side

Both sit in the Microsoft 365 Certified family. AB-900 leads to Copilot and Agent Administration Fundamentals. AB-650 leads to AI Services Administrator Associate, and Microsoft marks both that credential and its exam (beta) today.

	AB-900	AB-650
Family	fundamentals; the page lists its level as Beginner	associate
Status	live	in beta as of August 2026
Skill areas	3	3
Sub-bullets under those areas	53	58
Score you need	700	700
Time allowed	45 minutes	not published
Languages listed	English	English
Official practice assessment	yes	not currently available
Renewal	never expires	free assessment, once a year
Booking routes listed	Pearson VUE, plus Certiport for students and educators	Pearson VUE

Three of those rows decide more cases than the syllabuses do, so read them twice. Time allowed is blank on the AB-650 side because Microsoft has not published one — the word minutes is absent from its exam page and from its credential page. Renewal differs because of family, not subject: Microsoft's renewal page states that fundamentals certifications do not expire, while associate ones come back for a free, unproctored, open-book assessment every year. And booking routes matter if you are a student: Certiport is offered on AB-900's page and appears nowhere on AB-650's.

What AB-900 tests

AB-900's published outline carries the date July 22, 2026. It splits into three areas. The core objects and security features of Microsoft 365 services take 30–35%. Data protection and governance across Microsoft 365 and Copilot take 35–40%. Basic administrative work on Copilot and agents takes 25–30%.

Notice where the weight lands. The middle area is the heaviest, and it is mostly Microsoft Purview. One bullet alone names Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Security Posture Management for AI, and Data Lifecycle Management. Around them sit sensitivity labels, classification and retention. An exam named after Copilot spends most of its marks somewhere else. We take that surprise apart in our AB-900 exam guide.

The sitting itself runs 45 minutes, is proctored, and may include interactive components. English is the only language listed. An official practice assessment is linked from the certification page, and so is the exam sandbox.

What AB-650 tests

AB-650's published outline also has three areas, weighted 20–25%, 40–45% and 35–40%. In order: configuring and managing tenants and workloads; then governing and securing them; then managing and securing the AI services that run on top.

Count the detail underneath and the shape changes. Those three areas carry 58 sub-bullets, and 24 of them — the largest group of the three — make up the AI and agent block. That block is where AB-650 stops resembling anything else Microsoft currently examines. It names Microsoft Entra Agent ID, the agent registry, Agent 365, Microsoft 365 Copilot Search, Copilot connectors, third-party AI providers, Microsoft 365 Copilot Cowork and the Copilot Control System.

The rest is recognisable administrator work, at administrator depth: tenant branding and domains; licensing, including pay-as-you-go; Microsoft 365 Backup; Service health; mailboxes and teams; SharePoint permissions; Microsoft Entra users, groups, guests, administrative units and PIM; authentication methods and SSPR; Conditional Access; Microsoft Defender for Office 365, including attack simulations; and Purview requirements for DLP, information protection and data lifecycle management.

Microsoft's audience note assumes you arrive with three things already. Microsoft Entra ID and Microsoft 365 workloads should be daily tools. Defender XDR capabilities should be understood. Microsoft Graph PowerShell should at least be familiar. Those are entry conditions, not topics the exam teaches you. Our AB-650 exam guide walks the full outline, and our AB-650 study plan sequences it.

Two format facts, then the honest gap. You need 700 or greater to pass. AB-650's credential page adds that beta exams are not scored straight away, because Microsoft is still gathering data on the questions. And there is no official practice assessment yet. Microsoft says one is not currently available, and gives a rule instead of a date: these usually arrive about eight weeks after an exam leaves beta and becomes generally available. We are not going to convert a condition into a month, and neither should anyone else.

The clearest difference is in the verbs

This one is our own measurement, and here is exactly how we made it, so you can repeat it. We took every sub-bullet from both published outlines and read only its first word.

Of AB-900's 53 sub-bullets, 42 open with Identify, Understand, Explain, Compare or Interpret. Of AB-650's 58, four do. AB-650's list opens instead with Configure fourteen times, Manage thirteen, Create seven and Monitor six.

That is most of the comparison in one pair of numbers. AB-900 asks you to know what a thing is and which console owns it. AB-650 asks you to set it up, secure it, and then show it stayed that way.

Where they overlap, and where they do not

Both outlines are public, so we searched each one for the other's terminology. The result is a cleaner split than a shared subject would suggest.

Named on both outlines: Microsoft Purview DLP · sensitivity labels and information protection · retention and data lifecycle management · Purview Data Security Posture Management (DSPM) · Conditional Access · Privileged Identity Management · SharePoint Advanced Management · oversharing · Copilot licensing, including pay-as-you-go.

On AB-650's outline, and nowhere on AB-900's: Agent 365 · Microsoft Entra Agent ID · the agent registry · Microsoft 365 Copilot Cowork · the Copilot Control System · Microsoft 365 Copilot Search · Copilot connectors · third-party AI providers · Microsoft Copilot Studio · Microsoft Defender for Office 365 · attack simulations · Microsoft 365 Backup · Service health · Microsoft Graph PowerShell · administrative units · SSPR.

On AB-900's outline, and nowhere on AB-650's: Zero Trust principles · responsible AI principles · Identity Secure Score · App registrations and Enterprise apps · single sign-on · Researcher · Analyst · Compliance Manager · Content search in eDiscovery · Copilot Analytics · the Microsoft Power Platform admin center.

Read the third list carefully, because it is the one people get wrong. AB-900 is not a subset of AB-650. It carries concept material — Zero Trust, responsible AI, reading a secure score — that the associate outline never asks for. Passing AB-650 would not make those questions easy.

What Microsoft does not say about the pair

We looked, specifically, and found nothing. Across the three AB-650 pages, AB-900 appears zero times. Across AB-900's two pages, AB-650 appears zero times. There is no prerequisite line, no progression table, no successor note, and no sentence that points a reader from one exam to the other. The only entry under Related certifications on the AB-650 exam page is AB-650's own credential, and its related exams are given as none. Its retirement date is given as none too.

So we will not tell you that Microsoft recommends an order, because Microsoft has not published one. Anything that reads like an official pathway between these two exams was written by somebody else. What follows was written by us, and we say so.

Which to take first — our recommendation, and it is ours

This section is our opinion, in our voice. Microsoft names no order between AB-650 and AB-900, and we are not going to invent one on its behalf. It comes from writing the question banks for both exams — 176 questions for AB-900 and 351 for AB-650, each one grounded in Microsoft's own documentation.

We would take AB-900 first if Microsoft 365 administration is new to you. If you have never assigned a licence, never opened the Exchange or SharePoint admin centre, and never written a Conditional Access policy, then AB-650's outline is not a syllabus for you. It is a job description you have not held. AB-900 hands you the vocabulary and a map of which console owns what, in 45 minutes, with an official practice assessment to rehearse against. AB-650 then becomes a depth problem instead of a translation problem.

We would go straight to AB-650 if you already run a tenant day to day. If your week involves Entra groups, Purview policies and Defender alerts, much of AB-900 will ask you to recognise things you configure by hand. Take the associate exam and skip the recognition level. Writing both banks made that divide obvious to us: AB-900's questions can largely be answered by a careful reader of the documentation, and a large share of AB-650's cannot.

We would take both, in that order, if you also want the fundamentals credential on your profile. It never expires, it is short, and it is the only one of the two with an official practice assessment right now. That last point is a real argument for taking AB-900 while AB-650 is still in beta.

One timing point, and it argues in both directions. AB-650 is in beta. Beta sittings are not scored immediately, and a beta exam's objectives can be revised, so the outline you revise from may not be the outline you sit. If a dated credential matters to you this quarter, that argues for AB-900 first. If being early matters more, beta is the earliest anyone can be.

If you hold neither today

Write down what you actually did at work last month, then match it against the two descriptions above. That works better than reading either syllabus cold.

If nothing on the AB-650 list is familiar, AB-900 is your entry point, and the practice assessment on Microsoft's certification page is there to try before you book anything. If most of the AB-650 list is familiar but the agent block is not, you are in the common case for 2026: the estate is familiar and the agent surface is not. That block is 24 of AB-650's 58 sub-bullets, and nothing on AB-900's outline prepares you for it.

Our commercial interest, stated here rather than left for you to spot. We sell practice exams for both of these, so we gain something whichever way you decide. That is exactly why the recommendation above sends some readers to the shorter fundamentals exam instead. If AB-900 is the right first step for you, take AB-900.

Our AB-650 practice exams follow the published outline for that beta exam, and every question links the official Microsoft page behind it. Our AB-900 practice exams do the same against the 22 July 2026 outline. If you are still deciding what either exam covers, start with the AB-650 exam guide or the AB-900 exam guide.

Independent study material. ciply.io is not affiliated with, endorsed by, or sponsored by Microsoft.