Azure.DevOps.Repos.InheritedPermissions

---

category: Microsoft Azure DevOps Repos severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Repos.InheritedPermissions.md

Azure.DevOps.Repos.InheritedPermissions

SYNOPSIS

Repository permissions should not be inherited from the project.

DESCRIPTION

Repository permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to repositories and branches.

Mininum TokenType: FineGrained

RECOMMENDATION

Consider removing inherited permissions from the repository and setting permissions explicitly.

LINKS

• Azure DevOps Security best practices