From the course: Microsoft Azure DevOps Engineer Expert (AZ-400) Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Design authorization and governance

Design authorization and governance

- In the previous lesson, we reviewed the different methods we can use to authenticate in Azure DevOps. Now, we will review the different ways in which we can restrict or grant permissions to perform certain actions over these services that we authenticated to. This is what is known as authorization, where you basically verify that the identity which is attempting to connect has the necessary permissions to perform the specified actions. To start out within Azure DevOps, there are several organization level policies that we can enable to restrict certain actions or connection types. The first being OAuth where you can allow or restrict the ability for third party applications from calling APIs in Azure DevOps on behalf of a user. The next is to enable or restrict SSH authentication, which as you may recall from a previous lesson is used to authenticate using a private and public key pair. And the next two are really…

Contents