build pipeline root security

[drdamour]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

i may be missing it, but is there a way to modify the build pipeline root security as opposed to a specific build?

ths stuff accessed from

New or Affected Resource(s)

• azuredevops_XXXXX

Potential Terraform Configuration

# Copy-paste your Terraform configurations here - for large Terraform configs,
# please use a service like Dropbox and share a link to the ZIP file. For
# security, you can also encrypt the files using our GPG public key.

References

• #0000

[xuzhang3]

Hi @drdamour You can use azuredevops_build_definition_permissions to manage the pipeline security https://registry.terraform.io/providers/microsoft/azuredevops/latest/docs/resources/build_definition_permissions

[drdamour]

@xuzhang3 but that requires a build definition id. I want to set the “top level” default permissions. How is that done?

[racdev]

We would also like this feature so that we can remove the edit pipeline permission from contributors and hence force the creation/management of pipelines to be via teraform.

[LanceSandino]

following... I do not believe there is a resource to managedefault build permission