Share via

How to find the Custom 'Groups Type' in Azure DevOps

Yash Tiwari 240 Reputation points
2025-08-06T11:43:17.13+00:00

Hi Team,

While Assigning Projects to my user in organization I got the option of 'custom' along with Project Readers, Project Contributors, Project Administrators. But that custom group is nowhere present in my project security groups. Where can i find this group? and why am i getting the custom option?
User's image

While checking inside my Project security group i can't find this 'custom' group.

Please let me know how to find this.

Azure DevOps

Answer accepted by question author

  1. Durga Reshma Malthi 11,595 Reputation points Microsoft External Staff Moderator
    2025-08-06T12:06:17.4633333+00:00

    Hi Yash Tiwari

    The custom option you are seeing is not related to Project Readers, Project Contributors, Project Administrators. Instead, it means you have some non-standard project permissions which are not aligned with your default Roles.

    Custom is not a standalone group; it’s a label that means this user has a custom permission configuration This might happen if:

    1. Someone edited the security settings for your user or a group.
    2. And if user is part of another group like a custom organization-level or project-level group that is not visible under the default “Project security groups” blade but has been granted specific permissions.
    3. If user have been assigned granular permissions via the Security -> Permissions interface for Repos, Pipelines, Boards, etc.

    If this custom assignment was unclear, you can:

    Remove the user from the project.

    Re-add them using one of the predefined roles to keep access predictable.

    Hope this helps!

    Please Let me know if you have any queries.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Durga Reshma Malthi 11,595 Reputation points Microsoft External Staff Moderator
    2025-08-06T14:21:26.3066667+00:00

    Hi Yash Tiwari

    Through UI -> Go to Project Settings -> Permissions -> Search for the user and review their effective permissions. You’ll likely see that their access is built from multiple roles or inherited permissions.

    And Some permissions can come from:

    • Microsoft Entra ID groups
    • Inherited organization-level groups
    • Manually created security groups that are not named Custom.

    API: GET https://vssps.dev.azure.com/{organization}/_apis/graph/memberships/{userDescriptor}?api-version=7.1-preview.1

    Additional Reference:

    https://learn.microsoft.com/en-us/rest/api/azure/devops/security/?view=azure-devops-rest-7.1

    Hope this helps!

    Please Let me know if you have any queries.

    Was this answer helpful?

    0 comments No comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.