Edit

Download permission report for a repository

  • Article

Azure DevOps Services

To determine the effective permissions of users and groups for a repository, you can download the permissions report. Requesting the report generates an email with a link to download the report. The report lists the effective permissions for the repository you select, for each user and group specified at the time the report is generated. Inherited permissions come from a parent group which you can view from the web portal. The report is a json-formatted report that you can open using Power BI or other json reader.

You can also use the Permissions Report REST API to download the report.

Prerequisites

  • To download the permissions report, you must be a member of the Project Collection Administrators group. The user interface button won't appear for users who aren't a member of this group.

Open Project Settings>Repositories

You can download the report for a select repository or for all repositories defined for a project.

  1. Open the web portal and choose the project for the repositories you want to download permissions for. To choose another project, see Switch project, repository, team.

  2. Open Project settings>Repositories.

    To download the permissions report for all repositories, choose Security.

    For example, here we choose (1) Project settings, (2) Repositories, and then (3) Security.

    Screenshot showing choosing Project settings>Repositories>Security.

    Otherwise, to set permissions for a specific repository, choose (1) the repository and then choose (2) Security.

    Screenshot showing choosing Project settings>Choose a repository>Security.

Download report

  1. Choose Download detailed report.

    Screenshot of All Repositories, Security page, Download detailed report button.

    The following message displays indicating the request was submitted to the server.

    Screenshot of request submitted message.

  2. Once you receive the email from Azure DevOps Notifications, open it and choose Download Report.

    A report labeled PermissionsReport_GUID.json appears in your Downloads folder.

    Important

    Reports are automatically deleted after 28 days of the request.