Restricting what researchers can consume

[callaghanmt]

(This is a question directly from IT)
If someone has access to their own resource group or subscription should they be able to choose any Azure product?

Can it even be restricted?

If it is in the main subscription, are we going to limit the range?

[callaghanmt]

Access to resources can be restricted at the level of a subscription via the Enterprise Portal.

Subscriptions can be allocated to individuals, schools, faculties or other any other entity and both the financial cap allocated to the subscription and what it can create should be discussed with the subscription owner at BRM or RSE discussion stage.

Use of resource groups or other resources directly within the main subscription should be avoided, especially for research and teaching projects.

We should not seek to artificially restrict the resources that teaching and research can consume. useful products will be:

Azure Genomics Platform
Azure Machine Learning Studio
Azure Lab Services

The Education Hub provides another way of allocating resources (subscriptions) with a hard cap. For example:

• Create a subscription within the tenancy and allocate this to a school
• An academic or other person within the school can then use the Education Hub to use this subscription to allocate child subscriptions to individual students (say... £250 worth of credit) or even researchers.
• This child subscription can then create any type or Azure resource with full rights but can't consume resource beyond the cap allocated to it.