Azure Devops staging options (Dev, PROD) for AzureDevops itself

Question

Hi,

I want to use Azure DevOps with PS and M365 DSC to automate the configuration of different tenants.
The Azure Devops component will be in a dedicated tenant.

My question now is about staging. For the tenants that should be configured with M365DSC, it is clear to me (either apply M365 config to a test tenant or to a Prod tenant).
I wonder how I should do the staging for the Azure Devops itself. Whether I should have 2 tenants for Azure DevOps. One for dev and one for Prod. The reason for this separation is also related to the companies change management process. While I can simply change things in dev, I need a change approval for PROD, even though this tenant is just for automation purposes and nothing else.

I wonder what are my options for this besides having 2 dedicated tenants with a dedicated Azure AD.

Maybe:

• One Azure AD and below management and resource groups under one subcription. (How can I prevent configuration drift when I change AzureDevops settings)
• One Azure AD and only different build pipelines for Dev and Test. Usage of different ACLs for the Dev and PROD build to prevent changes to the prod build.
• ...

Advise would be much appreciated.

KR
Chris

Answer 1

Hi @Chris ,

Please note that Azure DevOps is currently not supported in the Q&A forums, the supported products are listed over here https://learn.microsoft.com/en-us/answers/products.

You may ask the experts in the dedicated Azure DevOps forum over here:
https://developercommunity.visualstudio.com/report?space=21&entry=problem

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Best regards,
Leon