hands-on lab

Managing Permissions and Users in Azure Virtual Desktop

Up to 1h
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


Azure Virtual Desktop (AVD) is a desktop and application as-a-service offering in Azure. AVD provides you the ability to host client sessions on a session host running in Azure. AVD uses Remote Desktop Protocol (RDP) to initiate the connection and provide remote display and input capabilities securely over the internet. AVD includes many security capabilities to secure the infrastructure from potential misuse.

AVD Application Groups host a logical grouping of the applications running on a session host in a host pool. It offers the use of Remote Desktop and Remote App that can be published to the end-user. Whenever a host pool is created, a default Desktop App is created. However, AVD requires you to handle the user permission and assignment to ensure the systems are only accessible by the authorized users.

In this hands-on lab, you will understand and assign the user permission for AVD using the Azure Portal.

Learning Objectives

Upon completion of this beginner level lab, you will be able to:

  • Understand and assign Azure Virtual Desktop user permissions
  • Working with AVD user session diagnosis

Intended Audience

  • Candidates for AZ-140 (Configuring and Operating Microsoft Azure Virtual Desktop) Exam
  • Cloud Architects
  • DevOps Engineers


Familiarity with the following will be beneficial but is not required:

  • Azure Virtual Desktop

The following content can be used to fulfill the prerequisite:


May 23rd, 2023 - Resolve environment error

May 9th, 2023 - Resolved an issue that would cause the lab setup to not complete on rare occasions

Environment before

Environment after

About the author

Learning paths

Parveen is an Azure advocate with previous experience in the professional consulting services industries. He specializes in infrastructure and DevOps with a wide range of knowledge in security and access management. He is also an Azure Certified - DevOps Engineer Expert, Security Engineer, Developer Associate, Administrator Associate, CompTIA Certified - Network+, Security+, and AWS Cloud Practitioner.
Parveen enjoys writing about cloud technologies and sharing the knowledge with the community to help students upskill in the cloud.

Covered topics

Lab steps

Logging in to the Microsoft Azure Portal
Working with AVD Desktop App Assignments
Exploring User Diagnostics in Azure Virtual Desktop