Add users to Azure Pipelines

TFS 2017 | TFS 2015

Permissions for build and release pipelines are primarily set at the object-level for a specific build or release, or for select tasks, at the collection level.

You can manage security for different types of resources such as variable groups, secure files, and deployment groups by adding users or groups to that role. Project administrator can grant or restrict access to project resources. If you want to allow a team member to edit pipelines, you must be a project administrator in order to do so.

Set permissions for build pipelines

  1. From within your project, select Build and Release, and then select Builds to access your build pipelines.

    Access builds in TFS

  2. Select Security to set the permissions for all build pipelines.

    Access all builds security permissions

    To set permissions for a specific build pipeline, select the context menu for that build and select Security.

    Configure build permissions

  3. Choose the group you want to set permissions for, and then change the permission setting to grant or restrict access. In the following example, we change the contributors permission to allow editing build definitions.

    Contributors permissions - allow editing build definitions

  4. Select Save changes when you are done.

Set permissions for release pipelines

  1. From within your project, select Build and Release, and then select Releases to access your release pipelines.

    Access release pipelines TFS

  2. Select the context menu for All release definitions, and then select Security.

    All security releases

  3. Choose the group you want to set permissions for, and then change the permission setting to grant or restrict access. In the following example, we change the contributors permission to prohibit the deletion of release definitions.

    Configure permissions for release pipelines

  4. Select Save changes when you are done.

Manage permissions for build administrators group

  1. From within your project, select the gear icon button gear icon, and then select Collection settings.

  2. Select Security, and then select Project Collection Build Administrators. In this example, we want to allow the usage of build resources.

    Configure the build administrators group permissions

  3. Select Save changes when you are done.

Manage permissions for service connections

You can set up permissions for service connections or agent pools by adding users or groups to a specific role. You will need to be a member of the Project Administrator group to manage the permissions for these resources.

In the following example, we will add an Administrator to a service connection.

  1. From within your project, select the gear icon button gear icon, and then select Project settings.

  2. Select Services, and then select the service connection that you want to manage. Select Roles to add a new role.

    Select service roles

  3. Add the user or group and choose the role you want them to have.

    Add a new role

  4. Select Add when you are done.