AZDO.1008 - Request access to Azure DevOps by e-mail notifications to administrators.
Overview
Request access to Azure DevOps by e-mail notifications to administrators should be disabled.
Rationale: Access control to Azure DevOps is to be a controlled process where access is granted and tracked.
Remediation action:
Disable the policy to stop these requests and notifications.
- Sign in to your organization.
- Choose Organization settings.
- Select Policies, locate the Request Access policy and toggle it to off.
- Provide the URL to your internal process for gaining access. Users see this URL in the error report when they try to access the organization or a project within the organization that they don't have permission to access.
Results: When users try to access a project without the required permissions, the error message includes the request access URL. This link is shown on the error page to maintain confidentiality, regardless of whether the project exists.
Related links
Test Metadata
| Field | Value |
|---|---|
| Test ID | AZDO.1008 |
| Severity | Medium |
| Suite | Maester |
| Category | Azure DevOps |
| PowerShell test | Test-MtCheckAZDO1008 |
| Services | AzureDevOps |
| Learn more | https://go.microsoft.com/fwlink/?linkid=2113172 |
| Tags | AZDO, AZDO.1008 |
Source
- Test:
tests/Maester/AzureDevOps/Test.AZDO.1008.ps1 - Documentation:
tests/Maester/AzureDevOps/Test.AZDO.1008.md