Microsoft Entra ID · Developer & Technical

Azure DevOps Administrator

Can manage all enterprise Azure DevOps policies for organizations backed by Microsoft Entra ID.

Scope: Enterprise-level Azure DevOps policy management across all Entra-backed organizations

Permissions

  • Manage Azure DevOps organization policies
  • Configure security policies
  • Manage billing and licensing
  • Claim ownership of orphaned organizations
  • Configure guest access policies
  • Manage project collection settings

Common use cases

  • Enterprise DevOps governance
  • Security policy enforcement
  • Organization standards management
  • Orphaned organization recovery
  • Cross-organization policy alignment

Best practices

  • Define enterprise DevOps policies
  • Standardize security configurations
  • Document organization structures
  • Regular policy compliance review
  • Coordinate with project admins

Security considerations

  • Can affect all DevOps organizations
  • Policy changes impact development teams
  • Guest access policies are security-sensitive
  • Audit policy changes

Official Microsoft Learn documentation →

Open the interactive RBACMap →