
Program
Microsoft 365
Run a modern, secure workplace on Microsoft 365
Learn to administer and get real productivity value out of Microsoft 365 — from user and security management to Teams, SharePoint, and collaboration workflows.
12
Weeks
60
Chapters
4
Practice formats
1
Portfolio artifact
12 weeks — one module per week (12 modules, 60 chapters), each week ending with a live class every Saturday, plus a module exam before the next module opens.
Curriculum
60 chapters across 12 modules — each with guided notes, a live example, a quiz, an exercise, a challenge, and class practice.
Module 1 · MICROSOFT 365 FOUNDATIONS
- 1Introduction to Microsoft 365 AdministrationThe Microsoft 365 services, admin centers and roles, what an administrator does, and measuring adoption.Learn →
- 2Users, Groups & the Account LifecycleCreating and managing users, group types, dynamic groups, bulk operations, joiners/movers/leavers, and cleaning up inactive accounts.Learn →
- 3Licensing & Cost ManagementMicrosoft 365 plans, what each includes, frontline licenses, add-ons, group-based assignment, and right-sizing to control costs.Learn →
- 4Navigating the Microsoft 365 Admin CentersThe main admin centers and what each controls, where common tasks live, admin portals vs. PowerShell, delegated access for partners, and working efficiently across portals.Learn →
- 5Admin Roles & Least PrivilegeBuilt-in admin roles, why Global Administrator should be rare, role-based delegation, administrative units, break-glass accounts, and reviewing admin assignments.Learn →
Module 2 · IDENTITY & SECURITY
- 6Entra ID, MFA & AuthenticationMicrosoft Entra ID basics, authentication methods, rolling out MFA, self-service password reset, passwordless sign-in, and tracking registration.Learn →
- 7Conditional Access PoliciesHow Conditional Access evaluates signals, common baseline policies, report-only testing, exclusions and break-glass accounts, and troubleshooting sign-ins.Learn →
- 8Devices, Data Protection & ComplianceIntune device enrollment and compliance, app protection, sensitivity labels, data loss prevention, retention policies, and audit.Learn →
- 9Privileged Identity Management (Just-in-Time Admin)Standing vs. eligible admin access, activating roles with approval and justification, time limits, access reviews, alerts, and designing a PIM rollout.Learn →
- 10Authentication Methods, SSPR & PasswordlessComparing authentication methods by strength, phasing out SMS, number matching, passkeys and Windows Hello, self-service password reset, and measuring method adoption.Learn →
Module 3 · COLLABORATION SERVICES
- 11Exchange Online AdministrationMailboxes, shared and resource mailboxes, distribution lists, mail flow rules, email authentication (SPF, DKIM, DMARC), anti-phishing, and quotas.Learn →
- 12Microsoft Teams AdministrationTeams and channels structure, policies for messaging and meetings, guest and external access, apps, Teams lifecycle, and governing sprawl.Learn →
- 13SharePoint & OneDrive AdministrationSite types and hub architecture, permissions, external sharing settings, OneDrive for personal files, storage, and migrating from file shares.Learn →
- 14External Sharing & Guest AccessB2B guest accounts, sharing levels in SharePoint and OneDrive, Teams guest settings, domain allow/block lists, sponsors, and regular guest access reviews.Learn →
- 15Power Platform Governance in Microsoft 365Power Apps and Power Automate in M365 tenants, environments, data loss prevention policies for connectors, maker enablement, the CoE starter kit, and licensing considerations.Learn →
Module 4 · OPERATE & GOVERN
- 16Monitoring, Reports & Secure ScoreService health and the Message center, usage and activity reports, alerts, Microsoft Secure Score, and prioritizing security improvements.Learn →
- 17Building a Microsoft 365 Governance PlanWhat governance covers, roles and responsibilities, policies for identity, collaboration, data, and lifecycle, communication and training, and reviewing the plan.Learn →
- 18Usage Analytics & Driving AdoptionUsage reports in the admin center, active users per workload, adoption metrics, spotting under-used services, privacy settings for reports, and adoption campaigns.Learn →
- 19Backup, Recovery & the Shared Responsibility ModelWhat Microsoft protects vs. what customers must protect, recycle bins and retention, version history, third-party backup, restore scenarios, and ransomware recovery in M365.Learn →
- 20Running M365 Administration with ITSMRequest and incident processes for M365, service catalogue items, standard changes, knowledge articles, approvals, and measuring service quality.Learn →
Module 5 · ON THE JOB: TENANT SETUP & MIGRATION
- 21On the Job: Setting Up the Tenant, Domains & DNSKilima Health signs up for Microsoft 365 E3/E5. Configure the tenant, verify custom domains, publish the right DNS records (MX, SPF, DKIM, DMARC, Autodiscover), and avoid the setup mistakes that haunt admins later.Learn →
- 22On the Job: Migrating Email to Exchange OnlineMove 450 mailboxes from on-premises Exchange (and a clinic still on Gmail) to Exchange Online — choose the migration method, plan batches, communicate, cut over MX, and handle the day after.Learn →
- 23On the Job: Moving File Shares to SharePoint & OneDriveReplace the S: and H: drives — inventory and clean the data, map shares to sites and libraries, translate NTFS permissions, migrate with Migration Manager, and help users work the new way.Learn →
- 24On the Job: Hybrid Identity with Entra ConnectSynchronising on-premises Active Directory to Entra ID, sync options (password hash, pass-through, federation), cloud sync vs. Connect Sync, filtering, and common sync issues.Learn →
- 25On the Job: Planning Mailbox Migration BatchesGrouping mailboxes into batches, estimating sync time from size and throughput, cutover windows, executive mailboxes, and communications.Learn →
Module 6 · ON THE JOB: EXCHANGE ONLINE IN DEPTH
- 26On the Job: Mail Flow Rules, Connectors & Message Trace"My email never arrived!" Trace messages, read delivery reports, build mail flow (transport) rules for disclaimers and data protection, configure connectors for scanners and partners.Learn →
- 27On the Job: Email Security with Microsoft Defender for Office 365Phishing emails impersonating the CEO are reaching staff. Configure anti-phishing (impersonation protection), Safe Links, Safe Attachments, quarantine policies, user reporting, and attack simulation training.Learn →
- 28On the Job: Shared Mailboxes, Groups & Mailbox ManagementChoose correctly between shared mailboxes, Microsoft 365 groups, distribution lists and resource mailboxes; manage permissions, archives, quotas and leavers' mailboxes.Learn →
- 29On the Job: Calendars, Rooms & Resource MailboxesRoom and equipment mailboxes, booking policies, delegates, calendar sharing, room lists for Places/Outlook, and troubleshooting meeting issues.Learn →
- 30On the Job: Auditing Mailbox Permissions & ForwardingFull Access, Send As and Send on Behalf permissions, risky delegations, external forwarding, inbox rules used in attacks, and a regular audit routine.Learn →
Module 7 · ON THE JOB: TEAMS & SHAREPOINT ARCHITECTURE
- 31On the Job: Teams Governance — Creation, Guests & LifecycleSix months after launch there are 340 teams, many empty, some with external guests nobody remembers. Set creation policies, naming, templates, guest access rules, expiration and access reviews.Learn →
- 32On the Job: SharePoint Information Architecture & SharingDesign the intranet and document structure — hub sites, communication vs team sites, navigation, metadata, permissions and external sharing settings — so people can find and safely share information.Learn →
- 33On the Job: Teams Meetings, Rooms & PhoneConfigure Teams meeting and messaging policies for clinicians and admin staff, set up Teams Rooms in boardrooms, plan Teams Phone for clinics, and troubleshoot call quality.Learn →
- 34On the Job: SharePoint Storage & Site LifecycleTenant storage pools, site quotas, versioning settings, inactive sites, archiving and deletion policies, and keeping storage under control.Learn →
- 35On the Job: Teams Apps, Policies & PermissionsTeams app types, app permission and setup policies, approving third-party apps, custom apps, app consent, and assigning policies to groups.Learn →
Module 8 · ON THE JOB: ENDPOINT MANAGEMENT WITH INTUNE
- 36On the Job: Enrolling Devices with Intune & AutopilotKilima Health has 380 laptops, 120 shared clinic PCs and staff phones. Plan device enrolment — Windows Autopilot, shared devices, iOS/Android corporate and BYOD — and get devices managed without IT touching each one.Learn →
- 37On the Job: Compliance, Configuration & Update ManagementDefine what a 'healthy' device is with compliance policies, configure security baselines and settings catalog profiles, manage Windows update rings, and connect it all to conditional access.Learn →
- 38On the Job: Deploying & Protecting AppsDeliver the clinical and office apps people need — Microsoft 365 Apps, line-of-business Win32 apps, store apps — with assignments, dependencies and updates; protect data with app protection and app configuration policies.Learn →
- 39On the Job: Windows Update Rings & Patch ComplianceUpdate rings, deferral periods, feature vs. quality updates, Windows Autopatch concepts, measuring compliance per ring, and handling problem updates.Learn →
- 40On the Job: BYOD & Mobile Device ManagementCorporate vs. personal devices, enrolment vs. app protection (MAM) without enrolment, iOS and Android options, selective wipe, privacy communication, and Conditional Access for mobile.Learn →
Module 9 · ON THE JOB: COMPLIANCE & DATA SECURITY (PURVIEW)
- 41On the Job: Sensitivity Labels & Information ProtectionPatient data is shared too freely. Design a label taxonomy, configure encryption and markings, publish labels with defaults and justification, apply auto-labelling, and drive adoption.Learn →
- 42On the Job: Data Loss Prevention (DLP) PoliciesStop patient data leaving via email, Teams, SharePoint sharing and endpoints — design DLP policies with sensitive info types, policy tips, overrides and incident handling, tuned to avoid blocking care.Learn →
- 43On the Job: Retention, eDiscovery & AuditLegal needs emails about a disputed procedure from 2023, and regulators require records to be kept for years. Configure retention policies and labels, run eDiscovery searches and holds, and use the audit log.Learn →
- 44On the Job: Measuring Data ClassificationContent explorer and activity explorer, labelling coverage by department, auto-labelling, sensitive information types, and reporting classification progress.Learn →
- 45On the Job: Insider Risk & Communication ComplianceInsider risk scenarios, privacy-preserving investigations, policy templates, communication compliance for regulated industries, HR and legal collaboration, and ethical guardrails.Learn →
Module 10 · ON THE JOB: ADMINISTRATION AT SCALE & COPILOT
- 46On the Job: Administering at Scale with PowerShell & Microsoft GraphOnboard 40 new nurses, update 300 job titles and find unused licences — without clicking 1,000 times. Use Microsoft Graph PowerShell and the Exchange Online module safely, with scripts that can be re-run and audited.Learn →
- 47On the Job: Microsoft Graph API & Automated ReportingLeadership wants a monthly Microsoft 365 adoption and security report. Call Microsoft Graph with an app registration, handle paging and throttling, combine usage and security data, and automate delivery.Learn →
- 48On the Job: Preparing for Microsoft 365 CopilotLeadership wants to roll out Microsoft 365 Copilot. Assess data readiness and oversharing, fix permissions, configure governance, choose pilot users, train them, and measure value.Learn →
- 49On the Job: Bulk User Operations SafelyPreparing CSV inputs, validation before changes, generating user principal names, licence assignment by department, dry runs, logging, and rollback for bulk changes.Learn →
- 50On the Job: Power Automate for M365 AdminsAutomating admin workflows with Power Automate: approvals for requests, scheduled reports, alerts from service health, connectors and permissions, and ownership.Learn →
Module 11 · ON THE JOB: SUPPORT, INCIDENTS & CHANGE
- 51On the Job: Troubleshooting Common Microsoft 365 IssuesMonday's ticket queue: sign-in loops, Outlook not syncing, OneDrive conflicts, Teams audio, 'I can't access the site'. Use a structured method and the right admin tools to fix each fast.Learn →
- 52On the Job: Service Health, Message Center & Change ManagementMicrosoft changes Microsoft 365 every week. Monitor service health incidents, triage Message Center posts, communicate changes to users, manage release rings and keep a change calendar.Learn →
- 53On the Job: Responding to a Compromised Account (BEC)A finance user's account sends fake invoices to suppliers. Contain the account, investigate mailbox rules, sign-ins and OAuth apps, remediate, notify, and harden against business email compromise.Learn →
- 54On the Job: Joiner, Mover & Leaver RunbooksAccount lifecycle processes, onboarding checklists, role changes, offboarding steps for mailboxes, OneDrive and devices, timing, legal holds, and automation.Learn →
- 55On the Job: Support Metrics & SLAs for M365Ticket priorities and SLAs, measuring SLA attainment, breached tickets, first-contact resolution, trends by category, and turning metrics into improvements.Learn →
Module 12 · CAPSTONE & CAREER LAUNCH
- 56Capstone: Microsoft 365 Governance PlanProduce a documented Microsoft 365 governance plan — security policies, licensing, and Teams/SharePoint structure — for a sample organization.Learn →
- 57Certifications, Portfolio & Interviews for Microsoft 365 AdminsBuild your path — MS-900, MS-102, MD-102, SC-300, SC-400 — set up a free developer/test tenant for hands-on practice, document projects, and prepare for admin scenario interviews.Learn →
- 58Job Search Strategy for Microsoft 365 RolesM365 job titles and levels, MSPs vs. in-house roles, certifications in context, describing admin experience with outcomes, and finding opportunities.Learn →
- 59Building a Microsoft 365 Lab & PortfolioSetting up a safe lab tenant, scenarios to build, documenting configurations with screenshots and scripts, avoiding sharing real data, and presenting your lab in interviews.Learn →
- 60Your First 90 Days as a Microsoft 365 AdministratorStart safely in a new tenant — get least-privilege access, document the current configuration, review security posture and licences, build relationships, and deliver a visible improvement.Learn →
Delivery
Blended — self-paced lessons plus live admin-console labs
Portfolio outcome
A documented Microsoft 365 governance plan — security policies, licensing, and Teams/SharePoint structure — for a sample organization.
Certificate
Certificate of completion, verifiable online with its credential code.
By the end of this program, you'll be job-ready to…
- Manage users, licenses, and security policies for a real organization
- Structure Teams and SharePoint so information stays findable
- Apply conditional access and MFA policies that reflect real risk
Salary expectations
Estimated U.S. national average annual salary by experience level.
$65,000
Entry-level
$90,000
Mid-level
$125,000
Senior-level
Estimated figures for planning purposes — actual pay varies by location, employer, and experience.
Tools you'll master
Practical training, every chapter
- A live "try it yourself" example in every chapter you can run immediately
- A hands-on exercise per chapter, with hints and a reveal-able answer
- An open-ended challenge per chapter, graded against real success criteria
- Class practice prompts for pairs or cohorts, not just solo homework
Why take this program
Interview- and job-ready
Built to the same bar Aicloud actually hires against — not a generic syllabus.
Tier 1 company partners
Program partnerships with leading employers are in progress — see Affiliation for status.
Job connection access
Graduates get access to Aicloud's own hiring pipeline and employer referral network.
Professional networking
Cohort discussion boards and live sessions connect you with peers and mentors, not just content.
A real portfolio
You leave with a concrete, explainable artifact — proof of knowledge, not just a certificate.