azure-devopsazure-devops-extensions

Disable access to Azure Devops for already uninstalled extension


Last week we installed an extension to backup our Azure DevOps organisation (Backrightup Backup). After a few tests we decided to cancel this extension and we uninstalled the extension.

Still, everyday a backup is made in one of our storage accounts.

How do I kill all access to our Azure Devops environment so that backups are no longer created? How do I even manage the permissions of extensions?


Solution

  • The Backrightup extension permission is based on the your account which is the project collection administrator role.

    After investigation, you need to remove the account from DevOps organization(if you're owner, change owner to another account), and then add your account back to the organization(change owner back if needed).

    In addition, please also remove below permissions:

    1. Go to https://aex.dev.azure.com/me with your account, make sure the AAD domain is correct under your account. -> Manage Authorizations -> Revoke the app Backrightup.com. enter image description here

    2. Delete the enterprise app Backrightup on azure portal. enter image description here

    3. Uninstall Backrightup extension on DevOps organization.

    4. Go to project, remove webhook to BackrightUp.

    enter image description here