Поделиться через

Add an Active Directory / Microsoft Entra group to a built-in security group

  • Статья

Azure DevOps Server 2019

In this article, learn how to manage large user groups by adding Active Directory groups to built-in security groups in Azure DevOps. As outlined in About security, authentication, and authorization, there are two main types of built-in security groups: project-level and collection-level. Typically, you add groups to project-level groups like Contributors and Readers. For more information, see Default permissions and access.

The process for adding an Active Directory group to a built-in security group is the same, no matter the access level at which you add them.

Add an Active Directory group to a built-in security group

  1. Open the web portal and choose the project where you want to add users or groups. To choose another project, see Switch project, repository, team.

  2. Choose Project Settings, and then Security.

    Screenshot of Project Settings>Security selections.

  3. Select Security and under the Groups section, and then do one of the following actions:

    • Select Readers to add users who require read-only access to the project.
    • Select Contributors to add users who need full contribution access or Stakeholder access.
    • Select Project Administrators to add users who need administrative access to the project.

  4. Next, choose the Members tab.

    In the following example, we choose the Contributors group.

    Screenshot showing selection sequence, Admin context, Security page, Contributors group, Membership page.

    The default team group and all other teams you add to the project are included as members of the Contributors group. So, you can choose to add a new user as a member of a team instead, and the user automatically inherits Contributor permissions.

  5. Select Add to add a group.

  6. Enter the group name in the text box. You can enter multiple groups, separated by commas. The system automatically searches for matches. Select the match that meets your criteria.

    Screenshot showing the Add users and group dialog.

    Tip

    The first time you add a group, you can't browse or check the friendly name. After you add the identity, you can enter the friendly name directly.

Next steps

Request an increase in permission levels