Azure Devops PR Automation Requires Generic Contribute

[giscus[bot]]

Azure Devops PR Automation Requires Generic Contribute

A personal dev blog

https://www.sheldonhull.com/azure-devops-pr-automation-requires-generic-contribute/

[sheldonhull]

For future improvement of article:

The permissions I set: contribute, contribute to pull requests, create branch, create tag, force push, read.

I added at the repositories level.

[sheldonhull]

I also found out you you can grab the ID from the logs.

[sheldonhull]

This reared its ugly head again with 2 days of debugging.

• Discussion provided good info.
• Updated docs from microsoft are very detailed

Hoping this solves the issue as trying to add the contribute permissions back for another task to tag (similar to what renovate needs) failed with lacking Contribute permissions again.

[sheldonhull]

• Unchecked the Protect access to repositories in YAML pipelines setting for now.
• I created a custom group called BuildServiceContributors and assigned the repo permissions to it.
• I added
  PROJECTNAME Build Service (ORG) and it still didn't work.
• I added Project Collection Build Service (ORG) and it finally worked.

I miss GitHub. OMG I miss it.

[sheldonhull]

This discussion helps better explain how it works on the org level.