I have C# code that pulls data from Azure DevOps On-premise that executes with a service account with no problems. The service account has Collection Admin Access through an AD Group. My problem is the service account only needs read access. What does the code look like to generate a PAT for the service account that limits the access to read only?
1
votes
Not get your response for several days, would you please share your latest information about this issue? If you have any concern, feel free to share it here.
- Hugh Lin
I'm still trying to write the code but it seems as if I should be able to do it based on this documentation below. I dont know what the difference is between DevOps Service User and a DevOps Server user is though: docs.microsoft.com/en-us/azure/devops/integrate/get-started/…
- Jason R.
If you consider using OAuth, it can be achieved through code, but according to your question, PAT can not be generated programmatically. About the difference between Devops Service User and Devops Server user,you can refer to this document.
- Hugh Lin
@Hugh Lin, you are also right but he answered first. And Thank you, I thought "...Services" was an add on, not the cloud version of DevOps en premises
- Jason R.