1 voteAnti Ohne commented
In found out today that the REST API documentation is describing the old 2016-05-15 version of the policy API. The newer 2018-09-15 and 2018-10-15-preview version expose the following two extra PolicyFactName values: ScheduleEditPermission and EnvironmentTemplate.
ScheduleEditPermision is the policy for controlling the auto shutdown policy. EnvironmentTemplate controls the public environment option in the UI. Thus the access to public ARM templates and which templates may be used by the lab user.
The resource group user rights is controlled by the "environmentPermission" attribute within "type": "Microsoft.DevTestLab/labs".
DNSSEC remains on our long term roadmap, however it is unlikely to be available in CY 2019. If DNSSEC is a critical and immediate requirement for your business we’d suggest that you consider evaluating 3rd party DNS hosting solutions that provide this feature.