Question 1

How do we keep competing clients' data separated?

Accepted Answer

Give each engagement its own host pool, policy, and Entra ID access group, and let the platform enforce the boundary. Tenant isolation controls and the Advanced Policy Engine mean separation is configuration you can demonstrate rather than a process you assert.

Question 2

Can we provision an environment per engagement?

Accepted Answer

Yes. Build a standard engagement pool template and provision from it at kickoff. Because there is no hardware involved, a new engagement can be productive within days.

Question 3

What happens at closeout?

Accepted Answer

Idle Host Detection surfaces pools that have gone quiet and scheduling shuts them down, so an engagement's capacity is reclaimed instead of drifting into permanent overhead.

Question 4

Can consultants work from client premises?

Accepted Answer

Yes. The Atlas user portal provides browser-based access to a full desktop, which usually works on a client network where a VPN back to your office would not, and conditional access controls which devices and locations qualify.

Question 5

What can we tell a client auditing our security?

Accepted Answer

That their data is processed inside your own Azure tenant with no vendor-hosted infrastructure in the path, that their engagement is isolated by configuration, and that credential access and environment changes are recorded and exportable.

Professional Services Virtual Desktops