Limiting pipeline access in Azure DevOps

Question

I am working on an Azure DevOps project and would like to add a new user to the project. However, I would like to restrict the user's access to code source or my repo while still allowing them to add and edit my pipeline and YAML files. Is there a way to achieve this? Thank you.

Answer 1

Please do not forget to "Accept the answer" if the information provided helps you to help others in the community.

Hello @ELFIGHA, Oussama

This is not directly possible, however, I see a possible a workaround with using pipeline templates called from a different repository. Thus, giving you that sort of restriction you want to have as you can grant the user limited access to your own repository, where the source code lives, and allow them more access to the other repository (remote pipeline template repository).

 

If this sound like a good idea to you please read, you can read more about it here:

• resources.repositories.repository definition
• Use other repositories as templates

  

Here is another example levelling on remote template

• Using Templates in YAML Pipelines in Azure DevOps

This way, they can update pipeline configurations without accessing the main codebase.

I hope this helps.

Answer 2

In short, no (at least I don't see how this would be possible). YAML files are part of the repos

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin