Skip to content

[Feature Request] #1427

Description

@whsh-ca

Is your feature request related to a problem? Please describe.

We want to use the DevOps CLI to turn off inheritance at the "All branches" level for a newly created repo then remove built-in/inherited groups such as Build Administrators and Project Collection Administrators as well as configure custom ones e.g. My_Project_Group using

az devops security permission update --allow-bit $custom_permission_bits --id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject "$myGroupDescriptor" --token "$branchToken" --output table

There is a request #848 quite a few years ago and the solution offered then was to use the REST API. I'm not sure whether it works for our case because we want to turn off inheritance and configure custom access at the "All Branches" level so that any branch created afterwards will inherit the custom configuration instead of the organizational wide one. However, "token" is specific to given branch like main as far as I know.

As it has been several years, I'm wondering whether it's implemented already although I cannot find a CLI command that accomplish this.

Describe the solution you'd like

Add the feature so that permission inheritance can be disabled the same as the feature available on the DevOps GUI.

Additional context

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    FeatureFeature Work required.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions