Configure task group permissions in Azure Pipelines
Azure DevOps Services | Azure DevOps Server 2022 - Azure DevOps Server 2019
This article provides guidance on managing task group permissions in Azure Pipelines. The permissions for task groups follow a hierarchical model. By default, all task groups inherit the project-level permissions. Once a task group is created, you can modify the project-level permissions and the object-level permissions for individual task groups.
You can set the following permissions for task groups:
| Permission | Description |
|---|---|
| Administer task group permissions | Can add and remove users or groups to task group security. |
| Delete task group | Can delete a task group. |
| Edit task group | Can create, modify, or delete a task group. |
The default permissions for security groups are:
| Task | Readers | Contributors | Build Admins | Project Admins | Release Admins |
|---|---|---|---|---|---|
| Administer task group permissions | ✔️ | ✔️ | ✔️ | ||
| Delete task group | ✔️ | ✔️ | ✔️ | ||
| Edit task group | ✔️ | ✔️ | ✔️ | ✔️ |
The creator of a task group has all permissions to the task group.
Note
Task groups aren't supported in YAML pipelines, but templates are. For more information, see YAML schema reference.
Prerequisites
- You must be a member of an administrator group or be allowed Administer task group permissions to manage permissions.
- A task group must exist to set project- and object-level permissions.
Set project-level task group permissions
Follow these steps to set permissions for project-level task groups:
From your project, select Pipelines > Task groups.
Select Security.
Select users and groups to set their permissions to Allow, Deny, or Not set.
When finished, close the dialog to save your changes.
Add users or groups to the permissions dialog
To add users and groups that aren't listed in the permissions dialog:
- Enter the user or group in the search bar, then select the user or group from the search result.
- Set the permissions.
- Close the dialog.
When you open the security dialog again, the user or group is listed.
Remove users or groups from the permissions dialog
To remove a user from the permissions list:
Select the user or group.
Select Remove and clear explicit permissions.
When finished, close the dialog to save your changes.
Follow these steps to set permissions for project-level task groups:
From your project, select Pipelines > Task groups.
Select Security.
To add users or groups that aren't listed in the permissions dialog, select Add, enter the user or group, and select Save changes.
Select a user or group to set the permissions to Allow, Deny or Not set.
Select Save changes or you can select Undo changes to undo the changes. You must save the changes to apply the permissions before selecting another user or group.
You can select more users and groups to change their permissions.
Select Close when you're finished.
Set object-level task group permissions
Follow these steps to set permissions for individual task groups:
From your project, select Pipelines > Task groups.
Select a task group.
Select More commands
and select Security.Select users and groups to set their permissions to Allow, Deny, or Not set.
When finished, close the dialog to save your changes.
When a permission for an inherited user or group is explicitly set, inheritance is disabled for that specific permission. Change the permission to Not set to restore inheritance. To disable inheritance for all user and group permissions, turn off the Inheritance setting. Upon re-enabling inheritance, the settings for all permissions revert to the project level.
Add users or groups to the permissions dialog
To add users and groups that aren't listed in the permissions dialog:
- Enter the user or group in the search bar, then select the user or group from the search result.
- Set the permissions.
- Close the dialog.
When you open the security dialog again, the user or group is listed.
Remove users or groups from the permissions dialog
Users and groups can be removed from the task group. Inherited users and groups can't be removed unless inheritance is disabled.
Select the user or group.
Select Remove and clear explicit permissions.
When finished, close the dialog to save your changes.
You can set the permissions to Allow, Deny, or to Not set if the permission is not inherited. If inheritance is enabled you can change an explicitly set permission back to the inherited value.
Follow these steps to set permissions for individual task groups:
From your project, select Pipelines > Task groups.
Select a task group.
Select More commands
and select Security.Select users and groups to set their permissions to Allow, Deny, or Not set.
When finished, close the dialog to save your changes.
When a permission for an inherited user or group is explicitly set, inheritance is disabled for that specific permission. Change the permission to Not set to restore inheritance. To disable inheritance for all user and group permissions, turn off the Inheritance setting. Upon re-enabling inheritance, the settings for all permissions revert to the project level.
Add users or groups to the permissions dialog
To add users and groups that aren't listed in the permissions dialog:
- Enter the user or group in the search bar, then select the user or group from the search result.
- Set the permissions.
- Close the dialog.
When you open the security dialog again, the user or group is listed.
Remove users or groups from the permissions dialog
Users and groups can be removed from the task group. Inherited users and groups can't be removed unless inheritance is disabled.
Select the user or group.
Select Remove and clear explicit permissions.
When finished, close the dialog to save your changes.
You can set the permissions to Allow, Deny, or to Not set if the permission is not inherited. If inheritance is enabled you can change an explicitly set permission back to the inherited value.
Follow these steps to set permissions for a task group:
From your project, select Pipelines > Task groups.
Select a task group.
Select More commands
> Security.To add users or groups that aren't listed in the permissions dialog, select Add, enter the user or group, and select Save changes.
Select users and groups to set their permissions to Allow, Deny or Not set.
Select Save changes or you can select Undo changes to undo the changes. You must save the changes to apply the permissions before selecting another user or group.
You can select more users and groups to change their permissions.
To remove a user or group, select the user or group and select Remove. Inherited users and groups can't be removed unless inheritance is disabled.
Select OK when you're finished.
When a permission for an inherited user or group is explicitly set, inheritance is disabled for that specific permission. Change the permission to Not set to restore inheritance. Select Clear explicit permissions to reset all explicitly set permissions to their inherited settings. To disable inheritance for all user and group permissions, turn off the Inheritance setting. Upon re-enabling inheritance, the settings for all permissions revert to the project level.
Related articles
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for