DOS1010

Artifacts - Restrict feeds creation to only administrators

DOS1010

AzureDevOps organization high builtIn

Description

Allow only administrators to create feeds in your organization. Learn more: https://learn.microsoft.com/en-us/azure/devops/artifacts/feeds/feed-permissions

Recommendation

1. Go to Artifacts. 
2. Click on Azure Artifacts Settings button. 
3. Review 'Who can create feeds' and select 'Only administrators and these users can create feeds'. Grant this permission to a limited set of users/groups.

Policy Rule

{
  "target": "ADOArtifactSettingsGlobalPermissions",
  "if": {
    "allOf": [
      {
        "resource": "ADOArtifactSettingsGlobalPermissions",
        "property": "OnlyAdministratorRole",
        "operator": "equals",
        "value": true
      }
    ]
  },
  "then": {
    "effect": "Audit"
  }
}
DOS1020 »
Rule Details
  • Rule ID: DOS1010
  • Code: ADO_Organization_Artifacts_Settings_Restrict_Who_Can_Create_Feeds
  • Platform: AzureDevOps
  • Category: organization
  • Severity: high
  • Type: builtIn
Related Rules

Copyright © DevOps Shield. All Rights Reserved. Privacy Policy | Cookie Policy | Terms and Conditions