Azure DevOps Administrator
Description
Can manage Azure DevOps organization policy and settings.
Details
Users with this role can manage the Azure DevOps policy to restrict new Azure DevOps organization creation to a set of configurable users/AAD groups. Users in this role can manage this policy through any Azure DevOps organization that is backed by the company's Microsoft Entra ID.
Directory Actions1
microsoft.azure.devOps/allEntities/allTasks
Graph API Permissions2
Microsoft do not provide a direct mapping between Directory actions and Graph API permissions, despite this being necessary for delegated (interactive) access. MSAdminRoles.com has meticulously compiled a list of the Graph API permissions that each built-in admin role enables you to utilise. Please note this listing is not 100% accurate. Graph API permissions and Entra RBAC operate as two independent authorisation planes and do not map to each other on a one-to-one basis.
Directory.Read.AllPolicy.ReadWrite.Authorization