Skip to content

[Feature Request] #1427

Open
Open
@whsh-ca

Description

@whsh-ca

Is your feature request related to a problem? Please describe.

We want to use the DevOps CLI to turn off inheritance at the "All branches" level for a newly created repo then remove built-in/inherited groups such as Build Administrators and Project Collection Administrators as well as configure custom ones e.g. My_Project_Group using

az devops security permission update --allow-bit $custom_permission_bits --id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject "$myGroupDescriptor" --token "$branchToken" --output table

There is a request #848 quite a few years ago and the solution offered then was to use the REST API. I'm not sure whether it works for our case because we want to turn off inheritance and configure custom access at the "All Branches" level so that any branch created afterwards will inherit the custom configuration instead of the organizational wide one. However, "token" is specific to given branch like main as far as I know.

As it has been several years, I'm wondering whether it's implemented already although I cannot find a CLI command that accomplish this.

Describe the solution you'd like

Add the feature so that permission inheritance can be disabled the same as the feature available on the DevOps GUI.

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    FeatureFeature Work required.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions