Review Azure Devops permissions

[ackernaut]

A user 🔒 wrote in:

We are trying to do an ADO integration for running Sprint Planning sessions. ADO is managed by the company and the Scrum Masters are provided admin rights only to certain projects. Due to this constraint, we are not able to integrate Parabol with ADO, and it prevents us from bringing User Stories in for Sprint Poker.

Is it possible to change the permissions so that a user doesn’t need admin rights to add the integration for use with Sprint Poker?

Would this be appropriate from a security standpoint? Do we have any options here?

[Dschoordsch]

I assume this is a limitation of how we publish this integration. Because each client needs to add a custom app to their ADO organization, the setup needs admin rights.
I'm not deep enough in the ADO world to be sure, but I would assume that if we would publish a proper app in the ADO marketplace, that this could reduce the necessary permissions to set it up (unless their admin forbids running apps in general).