Study guide

3.4 Agent Creation and Lifecycle

Microsoft AB-900 Study Guide Exam

Track your progress as you read

Finished sections get a check mark.

1 Microsoft 365 Core Features

AB-900 Exam Map and Audience M365 Licensing and Admin Centers Exchange, SharePoint, and Teams Objects Identity and Authentication with Entra Zero Trust and Security Basics Microsoft Graph and Permissions Model

2 Data Protection and Governance

Purview Information Protection DLP Policies and Sensitive Info Types Insider Risk and Communication Compliance DSPM for AI and Copilot Exposure Retention Labels and Records Governance Traps for Copilot Data

3 Copilot and Agent Administration

3.1 Copilot Licensing and Billing 3.2 Usage Monitoring and Analytics 3.3 Prompt Governance and Controls 3.4 Agent Creation and Lifecycle 3.5 Agent Permissions and Grounding 3.6 Admin Exam Scenarios and Review

3.4 Agent Creation and Lifecycle

Key Takeaways Explain This Topic AI

Microsoft Copilot Studio is the low-code platform for building custom agents with topics, knowledge sources, actions, and multi-channel deployment.

A topic is a modular conversation flow triggered by user intents, containing trigger phrases and nodes for messages, questions, and actions.

Agents go through an admin approval process before broad publication — administrators review and approve or reject submitted agents.

Agent lifecycle spans creation, security review, approval, channel deployment, usage monitoring, and retirement across M365 and Power Platform admin centers.

Power Platform environments provide runtime, Dataverse storage, and governance infrastructure for enterprise Copilot Studio agents.

Last updated: July 2026

Quick Answer: Build custom agents in Microsoft Copilot Studio using topics , knowledge sources , and actions . Before org-wide release, agents pass through an admin approval process in the Microsoft 365 admin center. Monitor and govern the full lifecycle through the M365 admin center and Power Platform admin center .

Custom Agents vs Built-in Copilot

Microsoft 365 Copilot ships with the tenant — a general productivity assistant across M365 apps grounded on the semantic index. Custom agents are purpose-built assistants for specific business scenarios: IT helpdesk triage, HR policy Q&A, sales playbook guidance, or facility requests. Makers author them in Microsoft Copilot Studio , a low-code platform that requires no deep coding expertise for standard scenarios.

AB-900 tests the creation toolchain , governance gates , and lifecycle consoles — not advanced bot scripting.

  • Microsoft Copilot Studio Core Concepts
  • Topics

A topic is a modular conversation flow defining how an agent responds to a specific user intent. Each topic contains:

  • Trigger phrases — utterances that activate the topic ("reset my password", "request PTO")
  • Nodes — sequential steps: messages, questions, conditions, and actions

Topics are the building blocks of agent logic. Complex agents compose many topics rather than one monolithic script.

Knowledge Sources

Agents ground responses on configured knowledge sources :

  • Source Type Example Use
  • Public websites Official product documentation
  • SharePoint sites Internal policy libraries
  • Uploaded files PDF handbooks, FAQ documents
  • Dataverse tables Structured CRM or ticketing data

Admins must verify sensitivity of connected sources because agents inherit the access patterns of configured knowledge.

Actions

Actions extend agents beyond conversation — connecting to external systems through:

  • REST API calls
  • Power Automate flow triggers
  • Pre-built connectors (ServiceNow, Salesforce, etc.)

An action lets an agent retrieve CRM data, submit a ticket, or update a record — not merely chat about it.

Generative Answers

Generative answers let an agent query configured knowledge sources with generative AI rather than following only rigid topic flows — blending authored logic with retrieval-augmented responses.

Agent Types: Declarative vs Autonomous

  • Type Behavior
  • Declarative agent Follows authored topic flows and configured instructions
  • Autonomous agent Uses AI planning to independently determine and execute multi-step tasks

Both use the same underlying model infrastructure; the distinction is architectural reasoning capability , not a specific GPT version or deployment channel.

Deployment Channels

Copilot Studio publishes agents to multiple channels:

  • Channel Availability
  • Microsoft Teams Agent appears as a Teams app in channels and chats
  • Web chat JavaScript widget for external websites
  • SharePoint Embedded via web part on SharePoint pages
  • Microsoft 365 Copilot Integrated via agent manifest / BYOA registration

The Teams channel makes a custom agent available directly as a Teams app — a frequent exam answer when the stem specifies Teams deployment.

Power Platform Runtime and Governance

Power Platform environments provide:

  • Runtime infrastructure for Copilot Studio agents
  • Dataverse for data storage and structured records
  • Application lifecycle management (ALM) for dev/test/prod promotion
  • DLP policies for connectors restricting which data sources agents can reach

The Power Platform admin center manages environments, maker permissions, tenant-level settings, and Copilot Studio governance. It complements — not replaces — the Microsoft 365 admin center.

Agent Approval Process

Before custom agents reach all users, organizations enable an agent approval process :

  • Maker builds and submits agent in Copilot Studio
  • Administrator reviews in Microsoft 365 admin center
  • Approve or reject based on security, data access, and compliance readiness
  • Published agents appear in the org catalog for authorized users

This prevents ungoverned agents from accessing organizational data or performing actions without review. Retention labels and conditional access policies do not substitute for this workflow.

  • Agent Lifecycle Management
  • End-to-end agent lifecycle management covers: Create → Review → Approve → Deploy → Monitor → Update → Retire
  • Phase Primary Console
  • Creation & authoring Copilot Studio
  • Approval & org catalog Microsoft 365 admin center
  • Environment governance Power Platform admin center
  • Usage monitoring Both M365 and Power Platform admin centers
  • Retirement Disable publishing, revoke access, archive Dataverse data
  • Maker Permissions

To build agents, a maker typically needs:

  • Appropriate Copilot Studio license/access
  • Author permissions in the target Power Platform environment
  • Membership in an Entra security group configured by administrators in the Power Platform admin center
  • Bring Your Own Agent (BYOA)

BYOA (Bring Your Own Agent) lets organizations integrate externally built agents — including Copilot Studio agents or custom platforms — into the Microsoft 365 Copilot experience or Teams via agent manifest registration . This is an integration pattern, not importing personal ChatGPT conversations or running models locally.

Worked Scenario: HR Policy Agent Rollout

An HR team builds a Copilot Studio agent grounded on SharePoint policy documents with an action to create a ServiceNow ticket. Before launch:

  • Security reviews knowledge source sensitivity labels
  • Admin submits agent for approval in M365 admin center
  • Teams app permission policy allows the agent for HR security group only
  • Power Platform admin verifies connector DLP permits ServiceNow
  • Post-launch, admins monitor usage in both admin centers
  • Common Exam Traps
  • Trap Reality
  • Copilot Studio is a SIEM or Purview tool It is a low-code agent authoring platform
  • Agents auto-publish to all users Approval process gates publication
  • Exchange admin center manages agents M365 + Power Platform admin centers
  • Topics are SharePoint pages Topics are conversation flows with trigger phrases