What NameSpace, NameSpaceID, Token and/or bit will give permission to Project Admins to add/Remove users (Any Permissions/AzureDevops gurus?))

userzoTa1 0
Viewed 39

Is there someone who knows the NameSpace, NameSpaceID and/or Token and/or bit value that gives Project Admins in Azure DevOps permissions to add and remove users. I know only Project Admins have that permissions and other Decurity Groups don't have that permissions.

I know you can find all the NameSpaces here. These are the different level of Namaspace.

  • Object-level
  • Project-level
  • Organization or collection-level
  • Server-level (on-premises only)
  • Role-based
  • Internal only

I cannot point out in "Internal Namespace and Permissions" which particular one prove that access. It is not obvious.

Does anyone know what NameSpace, NameSpaceID and/or Token and/or bit will give permission to Project Admins to add/Remove users.

azure-cli powershell azure-devops
1 Answers

Does anyone know what NameSpace, NameSpaceID and/or Token and/or bit will give permission to Project Admins to add/Remove users.

Project Administrators are granted all project-level permissions, have the highest permission of the project. You can't change the permission settings for the Project Administrators group. This is by design.

enter image description here

enter image description here

This is stated in the official document.

If you mean manage permissions to read, write, and delete user account identity information, manage group membership and create and restore identity scopes. Then you can check the Identity namespace.

enter image description here

enter image description here

Andy Li-MSFT0
Related