编辑

通过

BuildAuthorizationScope enum

  • Reference
Package:
azure-devops-extension-api

Represents the desired scope of authorization for a build.

Fields

ProjectCollection = 1

The identity used should have build service account permissions scoped to the project collection. This is useful when resources for a single build are spread across multiple projects.
Project = 2

The identity used should have build service account permissions scoped to the project in which the build definition resides. This is useful for isolation of build jobs to a particular team project to avoid any unintentional escalation of privilege attacks during a build.