we have a security qa group in office 365. Members of this group are not allowed to access source code.
In vsts (Azure devops), we have denied access to the source code to this QA group ( denied on all repositories)
Now, we have 1 user that is going to join the dev team. He is still member of the QA group but he also needs access to the source code.
We are unable to give him permissions. As soon as we overwrite the permissions (contribute = Allow), when we leave and come back, contribute systematically comes back to deny.
The QA group coming from Office 365 has permissions on several resources and currently it is impossible to remove the user from this group.
How do we prevent access to source code to this group and allow 1 user in this group to access the code?
Note: We tried to play the inheritance flag on the user and on the group (all possible configuration) and this did not work
To be more precise: we want the QA team to have access to the test plan, board and overview and not the repos or the pipelines and one member of this group now needs access to the source code.