Skip to content

Commit 0d3d730

Browse files
Merge pull request #210079 from RoseHJM/azlab-azure-policies
Added section & links for creating custom policies
2 parents 7feb685 + b5cfff5 commit 0d3d730

File tree

1 file changed

+10
-2
lines changed

1 file changed

+10
-2
lines changed

articles/lab-services/azure-polices-for-lab-services.md

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,15 +40,15 @@ This policy can be used to restrict [customization of lab templates](tutorial-se
4040
|**Audit**|Labs will show on the [compliance dashboard](/azure/governance/policy/assign-policy-portal#identify-non-compliant-resources) as non-compliant when a template virtual machine is used for a lab.|
4141
|**Deny**|Lab creation to fail if “create a template virtual machine” option is used for a lab.|
4242

43-
## Lab Services require non-admin user for labs
43+
## Lab Services requires non-admin user for labs
4444

4545
This policy is used to enforce using non-admin accounts while creating a lab. With the August 2022 Update, you can choose to add a non-admin account to the VM image. This new feature allows you to keep separate credentials for VM admin and non-admin users. For more information to create a lab with a non-admin user, see [Tutorial: Create and publish a lab](tutorial-setup-lab.md#create-a-lab), which shows how to give a student non-administrator account rather than default administrator account on the “Virtual machine credentials” page of the new lab wizard.
4646

4747
During the policy assignment, the lab administrator can choose the following effects.
4848

4949
|**Effect**|**Behavior**|
5050
|-----|-----|
51-
|**Audit**|Labs show on the [compliance dashboard](/azure/governance/policy/assign-policy-portal#identify-non-compliant-resources) as non-compliant when non-admin accounts is not used while creating the lab.|
51+
|**Audit**|Labs show on the [compliance dashboard](/azure/governance/policy/assign-policy-portal#identify-non-compliant-resources) as non-compliant when non-admin accounts are not used while creating the lab.|
5252
|**Deny**|Lab creation will fail if “Give lab users a non-admin account on their virtual machines” is not checked while creating a lab.|
5353

5454
## Lab Services should restrict allowed virtual machine SKU sizes
@@ -60,6 +60,14 @@ During the policy assignment, the Lab Administrator can choose the following eff
6060
|**Audit**|Labs show on the [compliance dashboard](/azure/governance/policy/assign-policy-portal#identify-non-compliant-resources) as non-compliant when a non-allowed SKU is used while creating the lab.|
6161
|**Deny**|Lab creation will fail if SKU chosen while creating a lab is not allowed as per the policy assignment.|
6262

63+
## Custom policies
64+
65+
In addition to the new built-in policies described above, you can create and apply custom policies. This technique is helpful in situations where none of the built-in policies apply or where you need more granularity.
66+
67+
Learn how to create custom policies:
68+
- [Tutorial: Create and manage policies to enforce compliance](../governance/policy/tutorials/create-and-manage.md).
69+
- [Tutorial: Create a custom policy definition](../governance/policy/tutorials/create-custom-policy-definition.md).
70+
6371
## Next steps
6472

6573
See the following articles:

0 commit comments

Comments
 (0)