MS-102 Complete Guide: Microsoft 365 Administrator Expert Scope, Resources & Pass Strategy

Microsoft Certified: Microsoft 365 Administrator Expert (MS-102) is the Expert-tier certification for administrators who run an entire Microsoft 365 tenant. It launched in 2023 as the consolidated successor to MS-100 + MS-101 and is currently the only Expert-tier cert in the Microsoft 365 lineup. It's the capstone for engineers in the IT/IS departments of large enterprises rolling out Microsoft 365, or aspiring Microsoft 365 consultants — sitting alongside AZ-305/AZ-400 as one of the headline Microsoft Expert credentials.

This article walks through the MS-102 exam spec (one of the rare Expert credentials with no prerequisites), the 4-domain structure, overlap and differences vs SC-300/SC-200, how to use the Microsoft 365 Developer Program, a 3-4 month pass roadmap, and the follow-on paths to SC-100 and MD-102. Understanding that MS-102 is an exceptionally broad-scope exam — and tracking your study progress domain by domain — is the key to passing.

MS-102 Exam Fundamentals

The MS-102 spec follows the standard Expert-tier format. 150 minutes, 40-60 questions, a passing score of 700/1000, 165 USD (about 21,103 JPY), valid for 12 months (extendable via the renewal assessment). Delivered via Pearson VUE, online with OnVUE or at a test center, in multiple languages including Japanese. In addition to multiple choice, the format includes case studies, PowerShell command interpretation (Exchange Online PowerShell, Teams PowerShell, Microsoft Graph PowerShell), and scenario questions involving the Microsoft 365 admin center and various service admin UIs — with most items testing cross-service administrative workflows.

The Rare Expert Cert with No Prerequisites

MS-102 is unusual in that no prerequisite Associate certification is required — it grants the Expert badge on its own. AZ-305 (requires AZ-104), AZ-400 (requires AZ-104/204), and SC-100 (requires an SC Associate) all mandate an Associate cert, but MS-102 alone issues the "Microsoft 365 Administrator Expert" badge on Credly. The background: the Microsoft 365 space used to have Associate-tier certs (MS-300/MS-301) that were gradually retired, leaving today's two-step lineup of MS-900 (Fundamentals) and MS-102 (Expert). In practice MS-900 → MS-102 is a smooth learning order, but MS-900 is not a hard prerequisite.

Domain 1: Deploy and Manage a Microsoft 365 Tenant (25-30%)

This domain covers the foundational operations of a Microsoft 365 tenant. Core topics: tenant creation and initial setup; adding custom domains (DNS verification, MX records, SPF/DKIM/DMARC); billing/license management (feature differences across Microsoft 365 E3/E5/F3/Business, group-based license assignment, License Reuse); org settings (Microsoft 365 Apps / Office app deployment, Updates management, User experience settings); service health monitoring (Microsoft 365 Service Health Dashboard, Message Center); tenant automation via the Microsoft Graph API; and PowerShell (Microsoft Graph PowerShell, Exchange Online PowerShell, Teams PowerShell). The pitfall in this domain is license feature deltas. Which features are in E3 vs E5 (e.g., Defender for Office 365 Plan 2, Insider Risk Management, and Customer Lockbox are E5-only), the boundary between Microsoft 365 Business and Enterprise (the 300-user limit) — these granular feature mappings show up frequently.

Domain 2: Identity and Access Management in Entra ID (15-20%)

This domain has major overlap with SC-300 (Identity Admin) and covers identity integration in the Microsoft 365 context. Core topics: Entra ID sync (Entra Connect Sync / Cloud Sync / Pass-through Authentication / Federated); MFA tenant-wide rollout strategy; Conditional Access policy design (applied to Microsoft 365 apps); Self-Service Password Reset (SSPR); guest invitations via External Identity (B2B/B2C); delegated administration via Administrative Units (AU); and dynamic groups plus Self-Service Group Management. If you already hold SC-300, this domain is mostly review. If not, working through the SC-300 learning path in parallel is the efficient approach.

Domain 3: Security and Threat Management with Defender XDR (30-35%, Highest Weight)

The largest-weighted core domain, with significant overlap with SC-200 (SOC Analyst). Core topics: Microsoft Defender for Endpoint (EDR, Attack Surface Reduction, Threat & Vulnerability Management); Microsoft Defender for Office 365 (phishing protection, Safe Links, Safe Attachments, Anti-Phishing Policy); Microsoft Defender for Identity (detecting attacks against on-prem AD); Microsoft Defender for Cloud Apps (CASB, SaaS app visibility); incident response and Attack Story analysis in the Defender XDR portal; visualizing organizational security posture with Microsoft Secure Score; and threat intelligence (Threat Analytics, MDTI). This domain has the greatest impact on whether you pass MS-102, and studying it in parallel with SC-200 is the most efficient approach.

Domain 4: Compliance Management with Purview (20-25%)

This domain covers information protection and compliance, with major overlap vs SC-400 (Information Protection). Core topics: Microsoft Purview Information Protection (creating and applying Sensitivity Labels, auto-labeling); Data Loss Prevention (DLP) policies (applied to Exchange/SharePoint/OneDrive/Teams/Endpoint, detecting sensitive information); Insider Risk Management (detecting malicious insider behavior); Communication Compliance (compliance monitoring of internal communications); eDiscovery (responding to legal disclosure requests; Core/Premium eDiscovery); Audit (Audit Log, Advanced Audit); and Records Management (Retention Policy/Label, automatic classification). This domain tests your ability to map compliance frameworks like GDPR, SOC 2, ISO 27001, and APPI (Japan's Personal Information Protection Act) to Microsoft Purview features.

Leveraging the Microsoft 365 Developer Program

Effectively mandatory infrastructure for MS-102 study is the Microsoft 365 Developer Program. It provides a free tenant where you can fully exercise Microsoft 365 E5-equivalent features (Exchange Online, SharePoint Online, Teams, OneDrive, Power Platform, Microsoft Defender Plan 2, Entra ID P2, Purview Compliance). The tenant is valid for 90 days but auto-renews with regular activity, so in practice it's permanent. Sample users, emails, and documents come pre-populated, dramatically reducing the effort of standing up a hands-on lab. Signup is free and takes 30 seconds from a personal Microsoft account. For candidates studying MS-102, SC-300, SC-200, or SC-400, this is effectively required infrastructure.

A 3-4 Month Pass Roadmap

A 3-month plan assuming 1-3 years of Microsoft 365 admin experience plus MS-900. Month 1: Work through the Microsoft Learn MS-102 learning path (Tenant/Identity sections), spin up a tenant in the Microsoft 365 Developer Program, and practice license management, custom domain setup, and MFA/Conditional Access configuration. Month 2: Study the Defender XDR domain (in parallel with the SC-200 learning path), get comfortable with the portal UIs for Defender for Endpoint/Office 365/Identity/Cloud Apps, and analyze your Microsoft Secure Score. Month 3: Cover the Purview domain and final review. Configure Sensitivity Labels, DLP policies, and eDiscovery hands-on, and grind the official Practice Assessment until you consistently score 80%+. For newcomers, prepending 2-3 months of MS-900/SC-300/SC-200 study brings the realistic total to 5-6 months.

Where to Go After MS-102

To go deeper on security, take SC-100 (Cybersecurity Architect Expert) — the MS-102 + SC-100 combo positions you as a Microsoft 365 admin plus security architect. To strengthen endpoint management, MD-102 (Microsoft 365 Endpoint Administrator Associate) deepens your Intune/Autopilot/compliance-policy expertise. If you want to lean into Microsoft 365 automation, pair MS-102 with Power Platform certs (PL-200/PL-400/PL-600); for Teams operations specialists, MS-700 (Teams Administrator Associate). For multi-vendor admins, combining with Google Workspace Administrator or Okta Certified Administrator is also well regarded in the SaaS admin market. In the 8-12M JPY senior IS / Microsoft 365 consultant / SaaS admin lead salary band, MS-102 is increasingly listed as a hard requirement on its own.

Frequently Asked Questions

Exam information in this article is based on the official Microsoft Learn MS-102 page and the Microsoft 365 Documentation. This article is not an official Microsoft Corporation product and there is no affiliation or endorsement. Microsoft, Azure, Microsoft 365, Microsoft Entra, Microsoft Defender, and Microsoft Purview are trademarks of the Microsoft group of companies. Information is based on official sources as of May 24, 2026. Always confirm the latest details on the official pages.