Request access to Azure DevOps by e-mail notifications to administrators
AZDO.1008LowAzure DevOpsUsers and accessPreview 3.0
Part of Maester · Azure DevOps · Users and access · All checks
Invoke-Maester -TestId AZDO.1008Overview
Section titled “Overview”Request access to Azure DevOps by e-mail notifications to administrators should be disabled.
Rationale: Access control to Azure DevOps is to be a controlled process where access is granted and tracked.
Remediation action:
Section titled “Remediation action:”Disable the policy to stop these requests and notifications.
- Sign in to your organization.
- Choose Organization settings.
- Select Policies, locate the Request Access policy and toggle it to off.
- Provide the URL to your internal process for gaining access. Users see this URL in the error report when they try to access the organization or a project within the organization that they don’t have permission to access.
Results: When users try to access a project without the required permissions, the error message includes the request access URL. This link is shown on the error page to maintain confidentiality, regardless of whether the project exists.
Related links
Section titled “Related links”Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | AZDO.1008 |
| Severity | Low |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Users and access |
| Area | Access control |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtCheckAZDO1008 |
| Services | AzureDevOps |
| Learn more | https://go.microsoft.com/fwlink/?linkid=2113172 |