You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/dev-box/how-to-configure-project-policy.md
+29-60Lines changed: 29 additions & 60 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -31,51 +31,29 @@ This enforcement mechanism ensures projects access only the resources they're ap
31
31
32
32
## Create a default project policy
33
33
34
-
The first policy you create is the default project policy, which applies to all projects in the dev center. A default policy is an effective way to set up a baseline for your projects, ensuring that all projects have a minimum level of governance and control over the resources they can access. In a default project policy, you select resources to allow, like networks, images, and SKUs.
35
-
36
-
Projects apply the default policy unless they have a custom project policy. If a project has custom policy applied, then only the resources defined in custom policy are available to the project. If there's no custom policy assigned to the project, then the resources defined in the Default policy are available to the project. A project can only have one policy applied to it.
34
+
The first policy you create is the default project policy, which applies to all projects in the dev center. A default policy is an effective way to set up a baseline for your projects, ensuring that all projects have a minimum level of governance and control over the resources they can access. In a default project policy, you select resources to allow, like networks, images, and SKUs. Projects apply the default policy unless they have a custom project policy. If a project has custom policy applied, then only the resources defined in custom policy are available to the project. If there's no custom policy assigned to the project, then the resources defined in the Default policy are available to the project. A project can only have one policy applied to it.
37
35
38
36
To create a default project policy:
39
37
40
-
1. Sign in to the [Azure portal](https://portal.azure.com).
41
-
42
-
1. Navigate to your dev center.
43
-
44
-
1. In the left pane, expand **Manage**, and then select **Project policy**.
45
-
46
-
1. On the **Project policy** page, select **Create a policy**.
38
+
1. Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**. On the **Project policy** page, select **Create a policy**.
47
39
48
40
:::image type="content" source="media/how-to-configure-project-policy/project-policy-page.png" alt-text="Screenshot of the Project policy page in the Azure portal, showing options to create a new project policy.":::
49
41
50
-
1. The name of the policy is **Default**.
51
-
52
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-default-name.png" alt-text="Screenshot showing the default project policy name field in the Azure portal.":::
53
-
54
-
1. Under **Allow resources**, select the resources you want to allow for the project. You must select at least one resource for each category: images, networks, and SKUs.
42
+
1. The first policy you create is the **Default** policy. Under **Allow resources**, select the resources you want to allow for the project. You must select at least one resource for each category: images, networks, and SKUs.
55
43
56
-
1. Select **Select images**.
44
+
- In **Images**, select **Allow all current and future images**.
45
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-images.png" alt-text="Screenshot showing the Create project policy page, with Select images highlighted.":::
57
46
58
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-images.png" alt-text="Screenshot showing the Create project policy page, with Select images highlighted.":::
47
+
- In **Networks**, select **All current and future networks**.
48
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-networks.png" alt-text="Screenshot showing the Create project policy page, with Select networks highlighted.":::
59
49
60
-
1. In the **Select images** pane, to allow all current and future images for projects, select **All current and future images**, and then select **Select**.
50
+
- To allow specific SKU usage, in **SKUs**, select **Select a specific SKU or group of SKUs**.
51
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-skus.png" alt-text="Screenshot showing the Create project policy page, with Select SKUs highlighted.":::
61
52
62
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-current-future-images.png" alt-text="Screenshot showing the Select images pane in the Azure portal, with All current and future images selected.":::
53
+
- In the **Select SKUs** pane, select the SKUs you want to allow (e.g., all **16 vCPU** SKUs). Confirm your selection by selecting **Select**.
54
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-multiple-skus.png" alt-text="Screenshot showing the Select SKUs pane in the Azure portal, with multiple SKUs selected.":::
63
55
64
-
1. Select **Select networks**.
65
-
66
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-networks.png" alt-text="Screenshot showing the Create project policy page, with Select networks highlighted.":::
67
-
68
-
1. In the **Select networks** pane, to allow all current and future networks for projects, select **All current and future networks**, and then select **Select**.
69
-
70
-
1. To allow specific SKU usage, select **Select SKUs**.
71
-
72
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-skus.png" alt-text="Screenshot showing the Create project policy page, with Select SKUs highlighted.":::
73
-
74
-
1. In the **Select SKUs** pane, select **A specific SKU or group of SKUs**, and then select the SKUs you want to allow. In this example, you can select all the **16 vCPU** SKUs. To confirm your selection, select **Select**.
75
-
76
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-multiple-skus.png" alt-text="Screenshot showing the Select SKUs pane in the Azure portal, with multiple SKUs selected.":::
77
-
78
-
1. When you finish selecting the resources, select **Create**.
56
+
1. When you finish selecting the resources, select **Create** to finalize the policy.
79
57
80
58
:::image type="content" source="media/how-to-configure-project-policy/project-policy-create.png" alt-text="Screenshot showing the Create button in the Azure portal to finalize a project policy.":::
81
59
@@ -89,59 +67,50 @@ Custom project policies enable you to control resources for specific projects. T
89
67
90
68
To create and apply a custom project policy:
91
69
92
-
1. Sign in to the [Azure portal](https://portal.azure.com).
93
-
94
-
1. Navigate to your dev center.
95
-
96
-
1. In the left pane, expand **Manage**, and then select **Project policy**.
70
+
1. Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
97
71
98
72
1. On the **Project policy** page, select **Create**.
99
73
100
74
:::image type="content" source="media/how-to-configure-project-policy/project-policy-create-custom.png" alt-text="Screenshot showing the Create button for a custom project policy in the Azure portal.":::
101
75
102
-
1. On the **Create project policy** page, enter a name for the project policy.
103
-
104
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-name.png" alt-text="Screenshot showing the name field for a custom project policy in the Azure portal.":::
76
+
- On the **Create project policy** page, enter a **Name** for the project policy.
105
77
106
-
1. Under **Target projects**, select **Select projects**.
78
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-name.png" alt-text="Screenshot showing the name field for a custom project policy in the Azure portal.":::
107
79
108
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-projects.png" alt-text="Screenshot showing the Select projects option for a custom project policy in the Azure portal.":::
80
+
- Under **Target projects**, select **Select projects**.
109
81
110
-
1. In the **Select projects** pane, selectthe projects you want to apply the policy to, and then select **Select**.
82
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-projects.png" alt-text="Screenshot showing the Select projects option for a custom project policy in the Azure portal.":::
111
83
112
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-target-projects.png" alt-text="Screenshot showing the selected target projects for a custom project policy in the Azure portal.":::
84
+
- In the **Select projects** pane, select the projects you want to apply the policy to, and then select **Select**.
113
85
114
-
1. Under **Allow resources**, select the resources you want to allow for the project. For example, to allow a project to only use Visual Studio 2022 images, select **Select images**, and then select all Visual Studio 2022 images. To confirm your selection, select **Select**.
86
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-target-projects.png" alt-text="Screenshot showing the selected target projects for a custom project policy in the Azure portal.":::
115
87
88
+
1. Under **Allow resources**, select the resources you want to allow for the project. For example, to allow a project to only use Visual Studio 2022 images, in **Images**, select **Select a specific image or group of images**.
116
89
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-images.png" alt-text="Screenshot showing the Select images pane for a custom project policy in the Azure portal.":::
90
+
91
+
- Select all Visual Studio 2022 images. To confirm your selection, select **Select**.
92
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-multiple-images.png" alt-text="Screenshot showing the Select images pane for a custom project policy in the Azure portal.":::
117
93
118
94
1. You can select more resources. When you finish selecting resources, select **Create**.
119
95
120
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-summary-create.png" alt-text="Screenshot showing the summary of a custom project policy before creation in the Azure portal.":::
121
-
122
96
## View policies for a project
97
+
Once you create a custom project policy and apply it to the target project, the default project policy no longer applies to that project. The custom project policy must define all the resources you want to allow in the project.
123
98
124
-
To confirm that the project policy is applied to the project:
125
-
126
-
1. Sign in to the [Azure portal](https://portal.azure.com).
127
-
128
-
1. Navigate to your dev center.
99
+
To view the project policies that apply to projects:
129
100
130
-
1.In the left pane, expand **Manage**, and then select **Project policy**.
101
+
1.Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
131
102
132
103
1. On the **Project policy** page, expand the project policy you created.
133
104
134
105
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-summary.png" alt-text="Screenshot showing the summary of an applied custom project policy in the Azure portal.":::
135
106
136
-
Once you create a custom project policy and apply it to the target project, the default project policy no longer applies to that project. The custom project policy must define all the resources you want to allow in the project.
137
-
138
107
## Edit a project policy
139
108
140
-
1. Sign in to the [Azure portal](https://portal.azure.com).
109
+
To edit a project policy, you can modify the resources allowed in the policy. This is useful when you need to update the resources available to a project or when you want to change the governance settings for a project.
141
110
142
-
1. Navigate to your dev center.
111
+
To edit a project policy:
143
112
144
-
1.In the left pane, expand **Manage**, and then select **Project policy**.
113
+
1.Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
145
114
146
115
1. For the project policy you want to edit, scroll to the right and select **Edit**.
0 commit comments