azureazure-devopspermissions

How to restrict access in Azure DevOps to only one specific board?

I have the boards "A", "B" and "C" in my Azure devops project.

I want to collaborate with an external consultant. This person, we call him Peter, should only get access to the board "C". The workitems that are displayed in the boards "A" and "B" should not be visible.

  1. Do you have a recommendation how to solve this requirement?
  2. Is there a possibility to grant permission only to the area of board "C"?

I defined a new area "Area C" for the board "C". I defined a new team "External C". I added Peter to the team "External C".

Peter was still able to see also the work items that are visible on the boards "A" and "B".

Solution

  • You can do like as below:

    1. Go to "Project Settings" > "Teams" to create 3 teams in the project. For example, TeamA, TeamB and TeamC. If so, each team will have a board in this project. Add the external consultant as member of TeamC.

      enter image description here

    2. Go to "Project Settings" > "Project configuration" > "Areas" to create 3 area paths. For example, AreaPath_TeamA, AreaPath_TeamB and AreaPath_TeamC.

      enter image description here

    3. Go to "Project Settings" > "Team configuration" > select the team > "Areas" to add the area path to each team. After add the area path to each team, go back to "Project configuration" > "Areas", you can see each area path has its team assigned.

      enter image description here

    4. On "Project configuration" > "Areas", open the security hub of AreaPath_TeamA and AreaPath_TeamB, and set all the permissions to be 'Deny' for TeamC.

      enter image description here

    With above configurations, the members of TeamC will not has access to the work items assigned to TeamA and TeamB, and also cannot see work items on the boards of TeamA and TeamB.