-
-
Notifications
You must be signed in to change notification settings - Fork 2
Azure.DevOps.Project.MainRepositoryAcl.ProjectValidUsers
github-actions edited this page Jan 20, 2024
·
1 revision
category: Microsoft Azure DevOps Projects severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Project.MainRepositoryAcl.ProjectValidUsers.md
Project level repository acl should not have custom permissions for Project Valid Users
Project level repository acl should not have custom permissions for Project Valid Users. The Project Valid Users group is a special group that is automatically created when a project is created. It contains all users and groups that have been added to the project. This group should not be used to grant permissions to a repository.
Mininum TokenType: FineGrained
Remove the Project Valid Users group from the repository acl.