Azure Dev-ops security

Question

I'm trying to configure my Azure Dev-ops setup so I can expose just a repo to a client, rather than boards / wiki and all the other options.

How do I configure a group or team in dev-ops so that members of that group or team are NOT able to see anything other than a specific repo from my organization (ie they're able to pull from the repo but not even see boards,tasks,wiki etc from the same project)

I've tried doing a number of processes by following the guides and documentation which hasn't yielded a 'cut-down' view of the dev-ops project to my test email.

Answer 1

You can accomplish this via the Project Settings page.

Create a new security group

Then set the permissions. I applied the "deny" permission to every single item except "View project-level information."

Then in the Project Settings go down to Repos and click Repositories. Add your new security group to the repositories and set the permissions you want the group to have.

Remember that when you add users to the new group to make sure they are removed from other groups to limit their access. The menu items for boards, pipelines, etc will still show on the menu but when a user goes into them they can't see or create anything.

Answer 2

How do I configure a group or team in dev-ops so that members of that group or team are NOT able to see anything other than a specific repo from my organization

For this demand, I am afraid it is not feasible in azure devops. Regardless of how permissions are set, both the Overview and Boards are visible.

The only way I know of setting Overview and boards to invisible is to turn off the service in the project settings Overview, but this will make the service invisible to all members of the project.

I met some users have the same needs as you, you could raise your feature demand here to promote development of richer features or vote for the same Uservoice to increase priority.