Lab account setup guide


The information in this article applies to lab accounts. Azure Lab Services lab plans replace lab accounts. Learn how you can get started by creating a lab plan. For existing lab account customers, we recommend that you migrate from lab accounts to lab plans.

If you're an administrator, before you set up your Azure Lab Services environment, you first need to create a lab account within your Azure subscription. A lab account is a container for one or more labs, and it takes only a few minutes to set up.

This guide includes three sections:

  • Prerequisites
  • Plan your lab account settings
  • Set up your lab account


The following sections outline what you need to do before you can set up a lab account.

Access your Azure subscription

To create a lab account, you need access to an Azure subscription that's already set up for your school. Your school might have one or more subscriptions. You use a subscription to manage billing and security for all your Azure resources and services, including lab accounts. Azure subscriptions are managed by your IT department. For more information, see Azure Lab Services - Administrator guide.

Estimate how many VMs and VM sizes you need

It's important to know how many virtual machines (VMs) and which VM sizes your school lab requires.

For guidance on structuring your labs and images, see Moving from a physical lab to Azure Lab Services.

For more information on how to structure labs, see the "Lab" section of Azure Lab Services - Administrator guide.

Understand subscription VM limits and regional VM capacity

After you've estimated the number of VMs and the VM sizes for your labs, you need to:

  • Ensure that your Azure subscription's capacity limit allows for the number of VMs and the VM size that you plan to use in your labs.
  • Create your lab account within a region that has sufficient available VM capacity.

For more information, see VM subscription limits and regional capacity.

Decide how many lab accounts to create

To get started quickly, create a single lab account within its own resource group. Later, you can create more lab accounts and resource groups, as needed. For example, you might eventually have one lab account and resource group per department as a way to clearly separate costs.

For more information about lab accounts, resource groups, and separating costs, see:

Plan your lab account settings

To plan your lab account settings, consider the following questions.

Who should be the Owners and Contributors of the lab account?

Your school's IT administrators ordinarily take on the Owner and Contributor roles for a lab account. These roles are responsible for managing the policies that apply to all the labs in the lab account. The person who creates the lab account is automatically an Owner. You can add more Owners and Contributors from the Microsoft Entra tenant that's associated with your subscription.

For more information about the lab account Owner and Contributor roles, see the "Manage identity" section of Azure Lab Services - Administrator guide.

If you have an Administrator or Lab Owner role in two or more Microsoft Entra tenants, you can switch between tenants in the Lab Services web portal ( by selecting the control at the upper right, as shown in the following screenshot:

Screenshot of the control for switching between tenants in the Azure Lab Services portal.

Lab users see only a single list of the VMs that they have access to across Microsoft Entra tenants in Azure Lab Services.

Who will be allowed to create labs?

You may choose to have your IT team or faculty members create labs. To create labs, you then assign these people to the Lab Creator role within the lab account. You ordinarily assign this role from the Microsoft Entra tenant that's associated with your school subscription. Whoever creates a lab is automatically assigned as the Owner of the lab.

For more information about the Lab Creator role, see the "Manage identity" section of Azure Lab Services - Administrator guide.

Who will be allowed to own and manage labs?

You can also choose to have IT and faculty members own\manage labs without giving them the ability to create labs. In this case, users from your subscription's Microsoft Entra tenant are assigned either the Owner or Contributor for existing labs.

For more information about the lab Owner and Contributor roles, see the "Manage identity" section of Azure Lab Services - Administrator guide.

Do you want to save images and share them across labs?

Shared Image Gallery is a service that you can use for saving and sharing images. For classes that need to use the same image, Lab Creators can create the image and then export it to a shared image gallery. After an image is exported to the shared image gallery, it can be used to create new labs.

You might want to create your images in your physical environment and then import them to a shared image gallery. For more information, see the blog post Import a custom image to a shared image gallery.

If you decide to use the Shared Image Gallery service, you'll need to create or attach a shared image gallery to your lab account. You can postpone this decision for now, because a shared image gallery can be attached to a lab account at any time.

For more information, see:

Which images in Azure Marketplace will your labs use?

Azure Marketplace provides hundreds of images that you can enable so that Lab Creators can use them for creating their labs. Some images might include everything that a lab already needs. In other cases, you might use an image as a starting point, and then the Lab Creator can customize it by installing more applications or tools.

If you don't know which images you need, you can come back later to enable them. The best way to see which images are available is to create a lab account. Lab account creation will also give you access to review the list of available images and their contents.

For more information, see Specify the Azure Marketplace images that are available to Lab Creators.

Do the lab VMs need access to other Azure or on-premises resources?

When you set up a lab account, you also can peer your lab account with a virtual network. Keep in mind that both your virtual network and the lab account must be located in the same region. To decide whether you need to peer with a virtual network, consider the following scenarios:

  • Access to a license server

    When you use Azure Marketplace images, the cost of the operating system license is bundled into the pricing for lab services. However, you don't need to provide licenses for the operating system itself. For any other software and applications that are installed, you do need to provide a license, as appropriate. To access a license server:

    • You may choose to connect to an on-premises license server. Connecting to an on-premises license server requires additional setup.
    • Another option, which is faster to set up, is to create a license server that you host on an Azure VM. The Azure VM is located within a virtual network that you peer with your lab account.
  • Access to other on-premises resources such as a file share or database

    You ordinarily create a virtual network to provide access to on-premises resources by using a site-to-site virtual network gateway. Setting up this type of environment will take additional time.

  • Access to other Azure resources that are located outside a virtual network

    You can access the Azure resources that aren't secured in a virtual network through the public internet, without having to do any virtual network peering.

    For more information about virtual networks, see:

Set up your lab account

After you've finished planning, you're ready to set up your lab account. You can apply the same steps to setting up Azure Lab Services in Teams.

  1. Create your lab account. For instructions, see Create a lab account.

    For information about naming conventions, see the "Naming" section of Azure Lab Services - Administrator guide.

  2. Add users to the Lab Creator role. For instructions, see Add a user to the Lab Creator role.

  3. Connect to a peer virtual network. For instructions, see Connect your lab network with a peer virtual network.

    You might also need to refer to instructions for configuring the lab VMs address range.

  4. Enable and review images. For instructions, see Specify which Azure Marketplace images are available to Lab Creators.

    To review the contents of each Azure Marketplace image, select the image name. For example, the following screenshot shows the details of the Ubuntu Data Science VM image:

    Screenshot of a list of images available for review in Azure Marketplace.

    If a shared image gallery is attached to your lab account, and you want to enable custom images to be shared by Lab Creators, complete similar steps as shown in the following screenshot:

    Screenshot of a list of enabled custom images.

Next steps

For more information about setting up and managing labs, see: