Skip to content

Commit 68f183c

Browse files
author
RoseHJM
committed
Additional sections
1 parent 02efb9b commit 68f183c

File tree

1 file changed

+45
-6
lines changed

1 file changed

+45
-6
lines changed

articles/dev-box/how-to-configure-project-policy.md

Lines changed: 45 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -38,38 +38,77 @@ To enforce project policies:
3838
1. Navigate to your dev center.
3939
1. In the left pane, expand **Settings**, and then select **Project policy (preview)**.
4040
1. Under **Enforce project policy**, select the resources you want to restrict for all projects in the dev center.
41+
For example, to restrict the SKUs available to projects in the dev center, select **SKUs**.
4142
1. To confirm your selection and enforce it, select **Apply**.
4243

4344
## Create a default policy
4445
You should first create a default policy, which applies to all projects in the dev center. This is a good way to set up a baseline for your projects, ensuring that all projects have a minimum level of governance and control over the resources they can access. In a default policy, you select resources to restrict, such as networks, images, and SKUs.
4546

4647
When project policies are enforced, projects apply the default policy unless they have a custom project policy. This means that projects with a custom policy can access resources that aren't available to projects without a custom policy. In other words, projects with a custom policy can access resources that aren't available to all projects in the dev center.
4748

49+
To create a default policy:
50+
4851
1. Sign in to the [Azure portal](https://portal.azure.com).
4952
1. Navigate to your dev center.
5053
1. In the left pane, expand **Settings**, and then select **Project policy (preview)**.
5154
1. Under **Project policies**, select **Create project policy**.
5255
1. On the **Create project policy** page, for **Targeted projects**, select **All current and future projects**.
5356
1. The name of the policy is **default**.
54-
1. In the **Select projects** pane, select the projects you want to apply the policy to, and then select **Select**.
5557
1. Under **Allow access to the following**, select the resources you want to restrict for the project.
56-
For example, to restrict the project to only use 16 vCPU SKUs, select **SKUs**, and then select all 16 vCPU SKUs.l the 16 vCPU SKUs.
57-
To confirm your selection, select **Select**.
58-
1. You can select one or more resources. When you finish selecting the resources, select **Create**.
59-
When you finish selecting the resources, select **Create**.
58+
For example, to restrict SKU usage, select **SKUs**.
59+
1. In the **Select SKUs** pane, select **A specific SKU or group of SKUs**.
60+
For example, to restrict the project to only use 16 vCPU SKUs, select **SKUs**, and then select all 16 vCPU SKUs.
61+
1. To confirm your selection, select **Select**.
62+
1. You can select one or more resources: images, networks, and SKUs. When you finish selecting the resources, select **Create**.
63+
1. To confirm that the default policy is applied to all projects, under **Project policies** > **default**, select **Show selected**.
6064

6165
## Create a Project policy
6266
Custom project policies enable you to control resources for specific projects. These policies allow you to control and restrict resources available to projects, ensuring better governance and resource management. Each project can have only one custom policy, but the same policy can be applied to multiple projects. These policies allow you to control and restrict resources available to projects, ensuring better governance and resource management.
6367

68+
To create and apply a custom project policy:
69+
6470
1. Sign in to the [Azure portal](https://portal.azure.com).
6571
1. Navigate to your dev center.
6672
1. In the left pane, expand **Settings**, and then select **Project policy (preview)**.
6773
1. Under **Project policies**, select **Create project policy**.
6874
1. On the **Create project policy** page, for **Targeted projects**, select **Select projects**.
6975
1. In the **Select projects** pane, select the projects you want to apply the policy to, and then select **Select**.
76+
For example, select **AI-dev**, and then select **Select**.
77+
1. In the **Name** field, enter a name for the project policy.
78+
For example, enter **AI-dev policy**.
7079
1. Under **Allow access to the following**, select the resources you want to restrict for the project.
80+
For example, to restrict the AI-dev project to only use 32 vCPU SKUs, select **SKUs**, and then select all 32 vCPU SKUs.
81+
1. To confirm your selection, select **Select**.
7182
1. You can select one or more resources. When you finish selecting the resources, select **Create**.
72-
When you finish selecting the resources, select **Create**.
83+
84+
## View policies for a project
85+
86+
1. To confirm that the project policy is applied to the project, under **Project policies**, select the name of the project policy you created.
87+
1. Under **Project policy**, select **Show selected**.
88+
1. The project policy shows the projects wo ahich it is appliedm and the resources that are restricted for the project.
89+
90+
1. To view the project policy for a specific project, select **Group by** > **Group by project**.
91+
1. Select the project you want to view the policy for, and then select **Show selected**.
92+
1. The project policy shows the resources that are restricted for the project. Note that the default policy and the project policy restrictions are combined. For example, if the default policy restricts the project to only use 16 vCPU SKUs, and the project policy restricts the project to only use 32 vCPU SKUs, the project can use both 16 vCPU SKUs and 32 vCPU SKUs.
93+
94+
95+
## Edit a project policy
96+
97+
1. Sign in to the [Azure portal](https://portal.azure.com).
98+
1. Navigate to your dev center.
99+
1. In the left pane, expand **Settings**, and then select **Project policy (preview)**.
100+
1. To view a specific project policy, select **Group by** > **Group by policy**.
101+
1. Under **Project policies**, on the project policy you want to edit, scroll to the right and select **...** > **Edit**.
102+
1. When you finish making changes, select **Apply**.
103+
104+
## Disable project policies
105+
106+
You can disable project policies to allow all projects in the dev center to access all resources. This is useful when you want to temporarily lift restrictions on resource usage for all projects in the dev center.
107+
108+
1. Sign in to the [Azure portal](https://portal.azure.com).
109+
1. Navigate to your dev center.
110+
1. In the left pane, expand **Settings**, and then select **Project policy (preview)**.
111+
1. Under **Enforce project policy**, clear the check boxes for the resources you want to allow all projects in the dev center to access.
73112

74113
## Related content
75114

0 commit comments

Comments
 (0)