# Stage chooser

Users should not be able to skip stages defined by the pipeline author.

Source: https://maester.dev/docs/tests/AZDO.1019

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/sebastianclaesson" title="Sebastian Claesson · Original author"><img src="https://github.com/SebastianClaesson.png" alt="Sebastian Claesson" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/sebastianclaesson">Sebastian Claesson</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Azure DevOps · Pipelines · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId AZDO.1019
```

## Overview

Users should not be able to skip stages defined by the pipeline author.

Rationale: Users should not be able to select stages to skip from the Queue Pipeline panel.

#### Remediation action

Enable the restriction to prevent users from skipping stages.

1. Sign in to your organization.
2. Choose Organization settings.
3. Select Settings under Pipelines, locate the "Disable stage chooser" policy and toggle it to on.

#### Related links

* [Learn - Stages](https://learn.microsoft.com/azure/devops/pipelines/process/stages?view=azure-devops&tabs=yaml)
* [Learn - Azure DevOps pipeline security](https://learn.microsoft.com/azure/devops/pipelines/security/overview?view=azure-devops)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | AZDO.1019 |
| Severity | Medium |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Pipelines |
| Area | Engineering systems |
| Resource type | Tenant |
| User impact | Medium |
| Implementation cost | Low |
| MITRE ATT&CK | None |
| PowerShell test | [Test-MtCheckAZDO1019](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1019.ps1) |
| Services | AzureDevOps |
| Learn more | [https://learn.microsoft.com/azure/devops/pipelines/security/overview?view=azure-devops](https://learn.microsoft.com/azure/devops/pipelines/security/overview?view=azure-devops) |

</details>

## Source

- Test: [`tests/maester/azure-devops/Test.AZDO.1019.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1019.ps1)
- Documentation: [`tests/maester/azure-devops/Test.AZDO.1019.md`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1019.md)