You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
title: Use Project Policies to Control Resource Use in Dev Box
3
-
description: Simplify resource management in Microsoft Dev Box with project policies. Set guardrails for projects and ensure secure, efficient workflows.
2
+
title: Enforce Governance with Project Policies in Microsoft Dev Box
3
+
description: Control resource use in Microsoft Dev Box with project policies that ensure compliance and streamline development workflows.
4
+
#customer intent: As a platform engineer, I want to set up project policies in Microsoft Dev Box to control resource use for my development teams.
4
5
author: RoseHJM
5
6
ms.author: rosemalcolm
6
7
ms.service: dev-box
7
8
ms.topic: how-to
8
-
ms.date: 05/07/2025
9
+
ms.date: 05/08/2025
9
10
ms.custom:
10
11
- ai-gen-docs-bap
11
12
- ai-gen-description
12
13
- ai-seo-date:03/28/2025
13
-
#customer intent: As a platform engineer, I want to set up project policies in Microsoft Dev Box to control resource use for my development teams.
14
+
- ai-gen-title
14
15
---
15
16
16
17
# Control resource use with project policies in Microsoft Dev Box
17
18
18
-
Efficient resource management is critical for development teams working on diverse projects. Microsoft Dev Box uses *project policies* to help platform engineers enforce governance while maintaining flexibility. With project policies, you can define guardrails for resource usage on a per-project basis across your organization. This article explains how to set up and manage project policies in Dev Box to optimize resource control and governance.
19
+
Efficient resource management is critical for development teams working on diverse projects. Microsoft Dev Box uses *project policies* to help platform engineers enforce governance while maintaining flexibility. With project policies, define guardrails for resource usage on a per-project basis across your organization. This article explains how to set up and manage project policies in Dev Box to optimize resource control and governance.
19
20
20
-
When policies are enforced, Dev Box evaluates the health of existing resource pools against the new policy settings:
21
+
When policies are enforced, Dev Box checks the health of existing resource pools against the new policy settings:
21
22
22
-
-**Pool health check**: Dev Box evaluates each resource pool to check compliance with the enforced policies.
23
-
-**Unhealthy pools**: A pool that doesn't meet the enforced requirements is marked as unhealthy, blocking the creation of new dev boxes in that pool.
24
-
-**Existing dev boxes remain active**: dev boxes already created in an unhealthy pool continue to function normally, so your teams can keep working without disruption.
23
+
-**Pool health check**: Dev Box checks each resource pool for compliance with the enforced policies.
24
+
-**Unhealthy pools**: A pool that doesn't meet the enforced requirements is marked unhealthy, which blocks the creation of new dev boxes in that pool.
25
+
-**Existing dev boxes remain active**: Dev boxes already created in an unhealthy pool continue to function normally, letting your teams keep working without disruption.
25
26
26
-
This enforcement mechanism ensures projects access only the resources they're approved for, maintaining a secure-by-default environment with efficient operations across all projects in a dev center.
27
+
This enforcement mechanism ensures projects use only the resources they're approved for, maintaining a secure by default environment with efficient operations across all projects in a dev center.
27
28
28
29
## Prerequisites
29
30
30
-
- Microsoft Dev Box configured with a dev center and projects.
31
+
- Microsoft Dev Box configured with a dev center, and projects.
31
32
32
33
## Create a default project policy
33
34
34
-
The first policy you create is the default project policy, which applies to all projects in the dev center. A default policy is an effective way to set up a baseline for your projects, ensuring that all projects have a minimum level of governance and control over the resources they can access. In a default project policy, you select resources to allow, like networks, images, and SKUs. Projects apply the default policy unless they have a custom project policy. If a project has custom policy applied, then only the resources defined in custom policy are available to the project. If there's no custom policy assigned to the project, then the resources defined in the Default policy are available to the project. A project can only have one policy applied to it.
35
+
The first policy you create becomes the default project policy. It applies to all projects in the dev center. A default policy sets up a baseline for your projects, ensuring they have a minimum level of governance and control over accessible resources. In a default project policy, you select resources to allow, like networks, images, and SKUs. Projects use the default policy unless they have a custom project policy. If a project uses a custom policy, only the resources defined in that policy are available. If no custom policy is assigned to the project, the resources defined in the default policy are available. A project can have only one policy applied.
35
36
36
37
To create a default project policy:
37
38
38
-
1. Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**. On the **Project policy** page, select **Create a policy**.
39
+
1. Sign in to the [Azure portal](https://portal.azure.com). Navigate to your dev center, expand **Manage**in the left pane, and select **Project policy**. On the **Project policy** page, select **Create a policy**.
39
40
40
41
:::image type="content" source="media/how-to-configure-project-policy/project-policy-page.png" alt-text="Screenshot of the Project policy page in the Azure portal, showing options to create a new project policy.":::
41
42
@@ -50,14 +51,14 @@ To create a default project policy:
50
51
- To allow specific SKU usage, in **SKUs**, select **Select a specific SKU or group of SKUs**.
51
52
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-skus.png" alt-text="Screenshot showing the Create project policy page, with Select SKUs highlighted.":::
52
53
53
-
- In the **Select SKUs** pane, select the SKUs you want to allow (e.g., all **16 vCPU** SKUs). Confirm your selection by selecting **Select**.
54
+
- In the **Select SKUs** pane, select the SKUs you want to allow (for example, all **16 vCPU** SKUs). Confirm your selection by selecting **Select**.
54
55
:::image type="content" source="media/how-to-configure-project-policy/project-policy-select-multiple-skus.png" alt-text="Screenshot showing the Select SKUs pane in the Azure portal, with multiple SKUs selected.":::
55
56
56
-
1.When you finish selecting the resources, select **Create** to finalize the policy.
57
+
1.After selecting the resources, select **Create** to finalize the policy.
57
58
58
59
:::image type="content" source="media/how-to-configure-project-policy/project-policy-create.png" alt-text="Screenshot showing the Create button in the Azure portal to finalize a project policy.":::
59
60
60
-
1. To confirm that the default project policy applies the resources, expand **Default**.
61
+
1. To confirm that the default project policy includes the resources, expand **Default**.
61
62
62
63
:::image type="content" source="media/how-to-configure-project-policy/project-policy-summary.png" alt-text="Screenshot showing the summary of a default project policy in the Azure portal.":::
63
64
@@ -67,7 +68,7 @@ Custom project policies enable you to control resources for specific projects. T
67
68
68
69
To create and apply a custom project policy:
69
70
70
-
1. Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
71
+
1. Sign in to the [Azure portal](https://portal.azure.com), go to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
71
72
72
73
1. On the **Project policy** page, select **Create**.
73
74
@@ -85,28 +86,28 @@ To create and apply a custom project policy:
85
86
86
87
:::image type="content" source="media/how-to-configure-project-policy/project-policy-target-projects.png" alt-text="Screenshot showing the selected target projects for a custom project policy in the Azure portal.":::
87
88
88
-
1. Under **Allow resources**, select the resources you want to allow for the project. For example, to allow a project to only use Visual Studio 2022 images, in **Images**, select **Select a specific image or group of images**.
89
-
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-images.png" alt-text="Screenshot showing the Select images pane for a custom project policy in the Azure portal.":::
89
+
1. Under **Allow resources**, select the resources you want to allow for the project. For example, to let a project use only Visual Studio 2022 images, in **Images**, select **Select a specific image or group of images**.
90
+
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-images.png" alt-text="Screenshot showing the Select images option for a custom project policy in the Azure portal.":::
90
91
91
92
- Select all Visual Studio 2022 images. To confirm your selection, select **Select**.
92
93
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-select-multiple-images.png" alt-text="Screenshot showing the Select images pane for a custom project policy in the Azure portal.":::
93
94
94
-
1.You can select more resources. When you finish selecting resources, select **Create**.
95
+
1.Select more resources if needed. When you finish selecting resources, select **Create**.
95
96
96
97
## View policies for a project
97
-
Once you create a custom project policy and apply it to the target project, the default project policy no longer applies to that project. The custom project policy must define all the resources you want to allow in the project.
98
+
When you create a custom project policy and apply it to the target project, the default project policy doesn't apply to that project. The custom project policy must define all resources you want to allow in the project.
98
99
99
100
To view the project policies that apply to projects:
100
101
101
102
1. Sign in to the [Azure portal](https://portal.azure.com), navigate to your dev center, and in the left pane, expand **Manage**, then select **Project policy**.
102
103
103
-
1. On the **Project policy** page, expand the project policy you created.
104
+
1. On the **Project policy** page, expand the custom project policy you created.
104
105
105
106
:::image type="content" source="media/how-to-configure-project-policy/project-policy-custom-summary.png" alt-text="Screenshot showing the summary of an applied custom project policy in the Azure portal.":::
106
107
107
108
## Edit a project policy
108
109
109
-
To edit a project policy, you can modify the resources allowed in the policy. This is useful when you need to update the resources available to a project or when you want to change the governance settings for a project.
110
+
Edit a project policyto update allowed resources, modify governance settings, or adjust resource availability as project requirements evolve.
110
111
111
112
To edit a project policy:
112
113
@@ -116,22 +117,24 @@ To edit a project policy:
116
117
117
118
:::image type="content" source="media/how-to-configure-project-policy/project-policy-edit.png" alt-text="Screenshot showing the Edit button for a project policy in the Azure portal.":::
118
119
119
-
1.When you finish making changes, select **Apply**.
120
+
1.After making changes, select **Apply**.
120
121
121
122
## Delete a project policy
122
123
124
+
To delete a project policy:
125
+
123
126
1. Sign in to the [Azure portal](https://portal.azure.com).
124
127
125
-
1.Navigate to your dev center.
128
+
1.Go to your dev center.
126
129
127
-
1. In the left pane, expand **Manage**, and then select **Project policy**.
130
+
1. In the left pane, expand **Manage**, and select **Project policy**.
128
131
129
-
1. Select the project policy you want to delete, and then select **Delete**.
132
+
1. Select the project policy to delete, and select **Delete**.
130
133
131
134
:::image type="content" source="media/how-to-configure-project-policy/project-policy-delete.png" alt-text="Screenshot showing the Delete button for a project policy in the Azure portal.":::
132
135
133
-
1. In the **Delete project policy** read the message: *"Deleting a custom policy will cause a pool to become unhealthy if the pool resources are allowed by the custom policy, but not allowed by the default policy."*, and then select **OK**.
136
+
1. In the **Delete project policy**, read the message: *"Deleting a custom policy will cause a pool to become unhealthy if the pool resources are allowed by the custom policy but not allowed by the default policy."*, and select **OK**.
134
137
135
138
## Related content
136
139
137
-
-[Key concepts for Microsoft Dev Box](concept-dev-box-concepts.md)
140
+
-Learn more about [key concepts for Microsoft Dev Box](concept-dev-box-concepts.md).
0 commit comments