Skip to content

docs(azure-devops): Add minimum OAuth permissions guidance #57

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
paigealleman-sketch wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs(azure-devops): Add minimum OAuth permissions guidance #57

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 10 additions & 3 deletions baton/azure-devops.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
title: "Set up an Azure DevOps connector"
og:title: "Set up an Azure DevOps connector"
description: "ConductorOne provides identity governance and just-in-time provisioning for Microsoft Azure DevOps. Integrate your Azure DevOps instance with ConductorOne to run user access reviews (UARs) and enable just-in-time access requests."
og:description: "ConductorOne provides identity governance and just-in-time provisioning for Microsoft Azure DevOps. Integrate your Azure DevOps instance with ConductorOne to run user access reviews (UARs) and enable just-in-time access requests."

Check warning on line 5 in baton/azure-devops.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/azure-devops.mdx#L5 

Did you really mean 'UARs'?
sidebarTitle: "Microsoft Azure DevOps"
---

Expand All @@ -18,7 +18,7 @@

The Azure DevOps connector supports [automatic account provisioning](/product/admin/account-provisioning).

This connector does not support account deprovisioning. You must deprovision accounts directly in Azure DevOps.

Check warning on line 21 in baton/azure-devops.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/azure-devops.mdx#L21 

Did you really mean 'deprovisioning'?

Check warning on line 21 in baton/azure-devops.mdx

View check run for this annotation

Mintlify / Mintlify Validation (conductorone) - vale-spellcheck

baton/azure-devops.mdx#L21 

Did you really mean 'deprovision'?

## Gather Azure DevOps credentials

Expand Down Expand Up @@ -58,11 +58,18 @@
Finally, click **API permissions** and select **Azure DevOps**.
</Step>
<Step>
Give the app the following permissions:
- user\_impersonation (Azure DevOps only allows delegated permissions)
Give the app the following permissions based on your needs:

**For sync-only (read) access:**
- user\_impersonation (required - Azure DevOps only allows delegated permissions)
- vso.profile
- vso.graph

**For full provisioning (read/write) access:**
- user\_impersonation (required - Azure DevOps only allows delegated permissions)
- vso.profile
- vso.graph\_manage
- vso.memberentitlementmanagement\_write
- vso.profile
</Step>
<Step>
Click **Add permissions**.
Expand Down