When a CSS lab profile is exported and imported, the subscription level settings (ACP and user permissions) are now preserved during the export/import.
The subscription prefix setting on enrollment accounts has been moved to the CSS subscription pool, so that the prefix will be applied to all enrollment accounts in the pool.
Reworked CSS resource provisioning so that resources deployed via Resource Templates are not blocked by the Access Control Policies configured in the lab profile.
Azure CSS labs are now subject to Cloud Security Review based on Access Control Policies.
Improved the way that Access Control Policies are applied in CSS labs to scope subscription and resource group ACPs appropriately.
Updated the naming convention on the LOD Policy Set in Azure, to include identifiers for the platform and type of Azure lab. A script will be ran to update any references to this in Life Cycle Actions and Activity Based Assessments.