Required permissions

To integrate Azure DevOps with GitProtect using OAuth, make sure the account has an administrator role. Otherwise, you may encounter permission errors or find that the approval button is inactive.

When integrating Azure DevOps via OAuth, the following scopes are required:

• Build: read and execute (vso.build_execute)

• Code: read, write and manage (vso.code_manage)

• Environment: read and manage (vso.environment_manage)

• Projects and Teams: read, write and manage (vso.project_manage)

• Variable Groups: read and create (vso.variablegroups_write)

• Wiki: read and write (vso.wiki_write)

• Work Items: read and write (vso.work_write)

• Packaging: read, write and manage (vso.packaging_manage)

• Artifacts: user_impersonation

• Login and read the profile

The ability to authorize the GitProtect OAuth application depends on your organization's User consent settings within Azure DevOps. The following options are available:

• Organization — when generating PAT, you must enable the All accessible organizations value in the Organization field.

• Build: read and execute

• Code: read, write and manage

• Environment: read and manage

• Extensions: read

• Project and Team: read, write and manage

• Test Management: read and write

• Variable Groups: read and create

• Wiki: read and write

• Work Items: read and write

• Packaging: read, write and manage

To ensure both backup and restore operations succeed, the following permissions are required:

1. Organization level:

   1. General:

      1. Create new projects (restore)

   2. Boards:

      1. Create process (restore)

      2. Edit process (restore)

2. Project level:

   1. General:

      1. View project-level information (backup)

3. Repositories level:

   1. Create branch (restore)

   2. Create repository (restore)

   3. Read (backup)

For on-premise installations, use the personal access token (PAT) method.

• Organization — when generating PAT, you must enable the All accessible organizations value in the Organization field.

• Build: read and execute

• Code: read, write and manage

• Environment: read and manage

• Extensions: read

• Project and Team: read, write and manage

• Test Management: read and write

• Variable Groups: read and create

• Wiki: read and write

• Work Items: read and write

• Packaging: read, write and manage

Required permissions for Azure DevOps and Azure DevOps Server specify the access levels GitProtect needs to securely back up and restore your data.

Permissions for Azure DevOps

User access levels

OAuth integration

Installation permissions for OAuth

Personal Access Token (PAT) integration

Prerequisites:

Required scopes:

Granular permission settings

Permissions for Azure DevOps Server

Personal Access Token (PAT) integration

Prerequisites:

Required scopes: