How can we custom permission in Azure DevOps Organization?

Question

Hi Azure community,

I’m looking for advice on how to assign permissions to a specific user in Azure DevOps so they can add users or groups to an organization or project with the least privilege required (Only be able to add users or groups in organization and project).

After reviewing the built-in permissions, it seems like assigning the “Project Collection Administrators” role would grant them the ability to add users, but it also provides many other permissions that I don’t need them to have.

Could anyone suggest a way to assign just the required permission for managing users or groups without giving broader admin rights?

Thank you for your help!