1. Comprehensive overview of processes related to the initial configuration of Microsoft 365
Initial tenant setup establishes the technical baseline for all later administration tasks. The section covers adding a custom domain and configuring client connectivity to Microsoft 365, with attention to the dependencies that influence access, service availability, and a correct starting configuration.
- adding your own domain in the Microsoft 365 service,
- configuring client connectivity with the Microsoft 365 platform.
2. Managing users, licenses and mail contacts on the Microsoft 365 platform
Daily tenant administration combines account handling with service oversight. This part addresses user, license, and mail contact management, then extends to assigning administrative roles and monitoring tenant health and service status to maintain continuity in Microsoft 365 operations.
- configuring administrative roles on the Microsoft 365 platform,
- managing tenant health and services on the Microsoft 365 platform.
3. Managing groups on the Microsoft 365 platform
Group administration on the Microsoft 365 platform is addressed as an operational area that affects collaboration, access organization, and service governance. The section focuses on how groups are handled in the tenant so that membership structures can support users and workloads in a controlled way.
4. Deploying Microsoft 365 Apps for Enterprise
Microsoft Viva Insights is used here as a source of workplace data that supports operational analysis in Microsoft 365. The section concentrates on interpreting organizational and productivity-related information so administrators can understand how app deployment and usage connect with work patterns.
- analyzing workplace data on the Microsoft 365 platform using Microsoft Viva Insights.
5. Introduction to identity synchronization
Before identities can be managed consistently in Microsoft 365, synchronization with existing directories must be prepared correctly. The section covers setup prerequisites, deployment of directory synchronization tools, and ongoing administration of synchronized identities in a hybrid environment.
- preparation for identity synchronization with the MS365 platform,
- implementation of directory synchronization tools,
- management of synchronized identities.
6. Managing secure user access on the Microsoft 365 platform
Securing user access starts with understanding how breaches occur and which attack paths are most common. The material links threat vectors, the Zero Trust model, Microsoft 365 Defender security capabilities, and Microsoft Secure Score to help structure access protection at the tenant level.
- analysis of threat vectors and data breaches,
- learning about the Zero Trust security model,
- familiarization with security solutions in the Microsoft 365 Defender service,
- learning about Microsoft Secure Score.
7. Analysis of privileged identity management
Privileged access creates a distinct identity risk profile that must be monitored differently from standard user activity. This section examines Azure Identity Protection from that perspective, focusing on the signals, risk evaluation, and identity-based protections relevant to elevated accounts.
- analysis of the Azure Identity Protection service.
8. Checking Exchange Online protection
Exchange Online security depends heavily on email-specific protection mechanisms. Participants work with Microsoft Defender for Office 365 and learn how Safe Attachments and Safe Links are managed to reduce phishing, malicious URL, and payload-based risks in the mail flow.
- familiarizing oneself with the Microsoft Defender for Office 365 service,
- managing safe attachments,
- managing safe links.
9. Threat analysis in the Microsoft 365 Defender service
Threat protection in Microsoft 365 spans cloud apps, endpoints, and collaboration workloads. Here the focus is on implementing controls with Defender for Cloud Apps, Defender for Endpoint, and Defender for Office 365, so incidents can be analyzed across services instead of in isolated security layers.
- implementation of application protection using the Microsoft Defender for Cloud Apps service,
- implementation of endpoint protection using Microsoft Defender for Endpoint,
- implementation of threat protection using the Microsoft Defender for Office 365 service.
10. Analysis of solutions for data management in Microsoft Purview
For long-term information governance, administrators need rules for retention, archiving, and formal records handling. The section connects these mechanisms with Microsoft Purview message encryption, showing how data lifecycle management and protected communication fit into Microsoft 365 compliance operations.
- familiarization with archiving and records management on the Microsoft 365 platform,
- familiarization with the retention function on the Microsoft 365 platform,
- familiarization with Microsoft Purview message encryption.
11. Becoming familiar with compliance on the Microsoft 365 platform
Protecting confidential information requires more than classification alone. This part focuses on Microsoft Purview capabilities for insider risk-related controls, information barriers, and data loss prevention, including how DLP policies are configured and applied in everyday administrative practice.
- implementation of risk management related to the use of confidential information in Microsoft Purview,
- implementation of Microsoft Purview information barriers,
- becoming familiar with the Microsoft Purview data loss prevention function,
- implementation of the Microsoft Purview data loss prevention function.
12. Implementation of sensitive data classification
Sensitivity labels are used to classify confidential content and apply consistent protection across Microsoft 365. The section explains label types, scope, and publishing, then moves to implementation choices that support access control, encryption, and user guidance for sensitive data handling.
- learning about sensitivity labels,
- implementing sensitivity labels.