A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change? They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
1
votes
1 Answers
0
votes
You could add your custom user-defined capabilities with following steps:
- Go to Agent Pools through the Settings button on top of the menu.
- Select one of the agent in your agent pool.
- Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://docs.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
