Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Azure DevOps Services | Azure DevOps Server | Azure DevOps Server 2022
The Azure DevOps Administrator role is a Microsoft Entra role for tenant-wide administration of Azure DevOps. Members of this role can:
- Claim ownership of orphaned organizations when the current owner and all Project Collection Administrators are inactive
- Configure tenant-level policies on the Microsoft Entra page in Organization Settings
- Restrict organization creation across the tenant
- Manage PAT policies across all organizations in the tenant, including restricting PAT creation scope and enforcing maximum lifespan
If you're not an Azure DevOps Administrator, you can't see the tenant-level policies on the Microsoft Entra page in Organization Settings.
Note
The Azure DevOps Administrator role is different from the Project Collection Administrator role. Project Collection Administrators manage a specific organization or collection, while Azure DevOps Administrators manage tenant-level policies across all organizations connected to a Microsoft Entra tenant. You don't need to be a Project Collection Administrator to be an Azure DevOps Administrator, and vice versa.
Prerequisites
| Category | Requirements |
|---|---|
| Permissions | Access to the Azure portal with a Microsoft Entra account in the tenant. |
Look up your Azure DevOps Administrators
Sign in to the Azure portal.
Select Microsoft Entra ID > Roles and administrators.
Search for Azure DevOps Administrator to see all current role assignments.
Get the Azure DevOps Administrator role assigned
If you need the Azure DevOps Administrator role, contact your Microsoft Entra tenant administrator. They can assign the role in the Azure portal under Microsoft Entra ID > Roles and administrators > Azure DevOps Administrator. The role can be assigned to individual users or Microsoft Entra groups.
Note
Changes to role assignments might take up to an hour to propagate to Azure DevOps.