If you plan to deploy shared device licenses in multiple labs to your institution, you can map each lab to a different product profile on the Admin Console. The above video explains the process of 'reviewing profile permissions'
STEP 6: Define access policy
Shared device configurations provide three options to control user access to apps: Access Policy, Egress IPaddresses,Associated Machines. You can use a combination of these options to prevent unauthorized usage of the apps and protect your student accounts and the assets created by them.