permissions-lookup-guide.md

title	Permissions and role lookup guide
titleSuffix	Azure DevOps
description	Index to permissions defined for Azure DevOps
ms.subservice	azure-devops-security
ms.assetid
ms.author	chcomley
author	chcomley
ms.topic	reference
monikerRange	<= azure-devops
ms.date	04/04/2022

Permissions lookup guide

[!INCLUDE version-lt-eq-azure-devops]

Use this index to locate the article on how to manage a specific permission. Most permissions are managed through the user interface for an object, project, or collection. Other permissions are managed by adding users and groups to a role.

Note

You can manage permissions through a command line tool or REST API. Some permissions are only managed through these tools. For more information, see Security namespace and permission reference.

If you're new to Azure DevOps, review Get started with permissions, access, and security groups and About security roles.

Values in parenthesis indicate what level the permission is managed:

::: moniker range="azure-devops"

• Object: Permissions are managed at the object level.
• Project: Permissions are managed at the project level.
• Collection: Permissions are managed at the organization level.
• Role: Permissions are managed through a security role.
• Team: Permissions are managed via the team administrator role. ::: moniker-end

::: moniker range="< azure-devops"

• Object: Permissions are managed at the object level.
• Project: Permissions are managed at the project level.
• Collection: Permissions are managed at the account or project collection level.
• Role: Permissions are managed through a security role.
• Server: Permissions are managed at the instance level for a server.
• Team: Permissions are managed via the team administrator role. ::: moniker-end

:::row::: :::column span="1":::

A

::: moniker range="azure-devops"

• Administer build permissions (Object)
• Administer build resource permissions (Collection)
• Administer release permissions (Object)
• Administer process permissions (Collection)
• Administer shelved changes (Collection)
• Administer task group permissions (Object)
• Administer shelved changes (Collection)
• Administer workspaces (Collection)
• Advanced Security
• Agent queues (Project, Role)
• Agent pools (Collection, Role)
• Alerts (Collection)
• Alerts (Team)
• Analytics Service (Project)
• Analytics views (Object)
• Area path (Object)
• Azure Artifacts
• Audit log
• Audit streams ::: moniker-end ::: moniker range="<azure-devops"
• Administer build permissions (Object)
• Administer build resource permissions (Collection)
• Administer release permissions (Object)
• Administer process permissions (Collection)
• Administer shelved changes (Collection)
• Administer task group permissions (Object)
• Administer shelved changes (Collection)
• Administer warehouse (Server)
• Agent queues (Project, Role)
• Agent pools (Collection, Role)
• Alerts (Collection)
• Alerts (Team)
• Analytics Service (Project)
• Analytics views (Object)
• Area path (Object)
• Azure Artifacts ::: moniker-end

B

::: moniker range="<=azure-devops"

• Branches, Git (Object)
• Branches, Team Foundation Version Control (TFVC) (Object)
• Build pipelines (Object)
• Build quality, manage (Object)
• Build queue, manage (Object)
• Build resources (Collection)
• Build permissions, manage (Object)
• Builds, manage (Object)
• Bypass policies when completing pull requests (Object)
• Bypass policies when pushing (Object)
• Bypass rules on work item updates (Project) ::: moniker-end

C

::: moniker range="<=azure-devops"

• Change process of team project (Project)
• Change work item type (Project)
• Check-ins, TFVC (Object)
• Collection-level information
• Configure Azure Boards (Team)
• Create a workspace (Collection)
• Create build pipeline (Object)
• Create child nodes (Area Path, Object)
• Create child nodes (Iteration Path, Object)
• Create new projects (Collection)
• Create process (Collection)
• Create releases (Object)
• Create tag definition (Project)
• Create test runs (Project)
• Contribute (Git branch, Object)
• Contribute (Query, Object)
• Customize process ::: moniker-end

D

::: moniker range="<=azure-devops"

• Dashboards, manage (Team)
• Delete audit streams (Collection)
• Delete (Query, Object)
• Delete and restore work items (Project)
• Delete build pipeline (Object)
• Delete builds (Object)
• Delete field from organization (Collection)
• Delete team project (Project)
• Delete test runs (Project)
• Delete release pipeline (Object)
• Delete release stage (Object)
• Delete releases (Object)
• Delete tag definition (Project)
• Delete task group(Object)
• Delete this node (Area Path, Object)
• Delete this node (Iteration Path, Object)
• Delete work items
• Delivery plans (Object)
• Deployment groups (Object, Role)
• Deployment pools (Collection, Role)
• Destroy builds (Object) ::: moniker-end

E

::: moniker range="<=azure-devops"

• Edit build definition (Object)
• Edit build quality (Object)
• Edit collection-level information (Collection)
• Edit build pipeline (Object)
• Edit instance-level information (Collection)
• Edit policies (Git branch, Object)
• Edit process (Collection)
• Edit project-level information (Project)
• Edit release pipeline (Object)
• Edit release state (Object)
• Edit shared Analytics views (Object)
• Edit shared Analytics views (Project)
• Edit task group (Object)
• Edit this node (Area Path, Object)
• Edit this node (Iteration Path, Object)
• Edit work items in this node (Area Path, Object)
• Enumerate tag definition (Project)
• Events (Collection)
• Extensions (Collection, Role) ::: moniker-end

F-L

::: moniker range="<=azure-devops"

• Feeds
• Field, delete (Collection)
• Force push (rewrite history, delete branches, and tags) (Git branch, Object)
• Git branch (Object)
• Inherited process (Object)
• Iteration paths (Object)
• Board, customize (Team)
• Labels, TFVC (Object)
• Library (Object, Role)
• Locks, TFVC (Object) ::: moniker-end

:::column-end::: :::column span="1":::

M-N

::: moniker range="azure-devops"

• Make requests on behalf of others (Collection)
• Manage audit streams (Collection)
• Manage build resources (Collection)
• Manage build qualities (Object)
• Manage deployments (Object)
• Manage enterprise policies (Collection)
• Manage permissions (Git branch, Object)
• Manage permissions (Query, Object)
• Manage project properties (Project)
• Manage release approvers (Object)
• Manage releases (Object)
• Manage test plans (Area Path, Object)
• Manage test suites (Area Path, Object)
• Manage test configurations (Project)
• Manage test environments (Project)
• Manage test controllers (Collection)
• Marketplace extensions (Collection, Role)
• Merge, TFVC (Object)
• Move work items out of this project (Project)
• Notes, Git (Object)
• Notifications (Collection) ::: moniker-end ::: moniker range="< azure-devops"
• Make requests on behalf of others (Collection)
• Make requests on behalf of others (Server)
• Manage build resources (Collection)
• Manage build qualities (Object)
• Manage deployments (Object)
• Manage enterprise policies (Collection)
• Manage permissions (Git branch, Object)
• Manage permissions (Query, Object)
• Manage project properties (Project)
• Manage release approvers (Object)
• Manage releases (Object)
• Manage test plans (Area Path, Object)
• Manage test suites (Area Path, Object)
• Manage test configurations (Project)
• Manage test environments (Project)
• Manage test controllers (Collection)
• Marketplace extensions (Collection, Role)
• Merge, TFVC (Object)
• Move work items out of this project (Project)
• Notes, Git (Object)
• Notifications (Collection) ::: moniker-end

O-P

::: moniker range="<=azure-devops"

• Override check-in validation by build (Object)
• Permanently delete work items (Project)
• Policies, Git branch (Object)
• Policies, Git repository (Object)
• Power BI (Analytics Service)
• Process (Collection)
• Project properties (Project)
• Project-level information ::: moniker-end

Q-R

• Queue builds (Object)
• Query (Object)
• Query folder (Object)
• Read (Query, Object)
• Rename team project (Project)
• Release pipelines (Object)
• Remove other's locks (Git branch, Object)
• Repository, Git (Object)
• Retain (build) indefinitely (Object)

S

• Secure files (Object, Role)
• Service endpoints (Collection, Role)
• Service hooks
• Shelvesets, TFVC (Collection)
• Sprints, define (Object)
• Sprints, select (Team)
• Stop builds (Object)
• Suppress notifications for work item updates (Project)

T

• Tags, Git (Object)
• Tags, work items (Project)
• Task groups (Object)
• Team projects (Collection)
• Test artifacts, delete
• Test configurations (Project)
• Test controllers (Project)
• Test environments (Project)
• Test runs (Project)
• TFVC repositories (Object)
• Trace settings (Collection)
• Trigger events (Collection)

U

::: moniker range="<=azure-devops"

• Update build information (Object)
• Update build queue (Object)
• Update project visibility (Project)
• Update tag definition (Project)
• Use build resources (Collection) ::: moniker-end

V

::: moniker range="<=azure-devops"

• Variable groups (Object, Role)
• View analytics (Project)
• View audit log (Collection)
• View build resources (Collection)
• View builds (Object)
• View release pipeline (Object)
• View releases (Object)
• View instance-level information (Collection)
• View project-level information (Project)
• View shared Analytics views (Object)
• View system synchronization information (Collection)
• View test runs (Project)
• View work items in this node (Area Path, Object)
• View permissions for this node (Area Path, Object)
• View permissions for this node (Iteration Path, Object)
• View system synchronization information (Collection) ::: moniker-end

W

• Work items (Project)
• Workspaces (Collection) :::column-end::: :::row-end:::

Related content

• Grant or restrict permissions to select tasks using Grant or restrict permissions to select tasks.
• Get started with permissions, access, and security groups by following Get started with permissions, access, and security groups.
• Learn About security roles.
• Refer to the Permissions and groups reference for detailed information.
• Change project-level permissions with Change project-level permissions.
• Modify project collection-level permissions using Change project collection-level permissions.
• Troubleshoot permissions issues by consulting Troubleshoot permissions.