Add users and manage access in Azure DevOps Services

Azure DevOps Services

This article describes how to add and manage user access through Direct assignment for Azure DevOps Services. For an overview of adding users and related concepts, see About organization management in Azure DevOps.

The following types of users can join your organization for free:

  • Five users who get Basic features, such as version control, tools for Agile, Java, build, release, and more
  • Unlimited users who get Stakeholder features, such as working with your backlog, work items, and queries
  • Unlimited Visual Studio subscribers who also get Basic features. Additional features, such as Azure Test Plans, can be assigned to users by access level, Basic + Test Plans.

Need more users with Basic features?

Note

For information about inviting external users, see Add external user.

Prerequisites

You can add users to a project or team, add projects to organizations, and add teams to projects.

Add users to your organization

Administrators can add users to an organization, grant access to appropriate tooling extensions and service access levels, and add users to groups - all in one view.

Note

If you have an Azure Active Directory (Azure AD)-backed organization, and you need to add users who are external to Azure AD, first add external users. On the Tell us about this user page, under Type of user, be sure to choose User with an existing Microsoft account. After you complete those steps, use the following steps to add the Azure AD user to Azure DevOps.

You can add up to 50 users in a single transaction. When you add users, each user receives a notification email with a link to the organization page.

Note

To enable the new user interface for the New user hub, see Enable preview features.

To give other users access to your organization, add their email addresses.

  1. Sign in to your organization (https://dev.azure.com/{yourorganization}).

  2. Select gear icon Organization settings.

    Open Organization settings

  3. Select Users, and then select Add users.

    Select the Users tab, and then select Add users

  4. Enter the following information.

    Web portal, organization admin context, Add new users dialog box

    • Users: Enter the email addresses (Microsoft accounts) or GitHub usernames for the users. You can add several email addresses by separating them with a semicolon (;). An email address appears in red when it's accepted. For more information about GitHub authentication, see FAQs.
    • Access level: Leave the access level as Basic for users who will contribute to the code base. To learn more, see About access levels.
    • Add to projects: Select the project you want to add them to.
    • Azure DevOps Groups: Leave as Project Contributors, the default security group for users who will contribute to your project. To learn more, see Default permissions and access assignments.

    Note

    Add email addresses for personal Microsoft accounts and IDs for GitHub accounts unless you plan to use Azure Active Directory (Azure AD) to authenticate users and control organization access. If a user doesn't have a Microsoft or GitHub account, ask the user to sign up for a Microsoft account or a GitHub account.

  5. Select Add to complete your invitation.

For more information about user access, read about access levels.

Note

You can add people to projects instead of to your organization. Users are automatically assigned Basic features if your organization has seats available, or Stakeholder features if not. Learn how to add members to projects.

When user no longer need access to your organization, delete them from your organization.

Add users to projects or teams

When you add members to projects without setting up billing, they automatically get Basic access, until you run out of seats available. If you add members to projects with billing already set up, they get Basic access only if your default access level is Basic. Otherwise, project members get assigned Stakeholder permissions.

Visual Studio subscribers, get Basic access. Additional features, such as Azure Test Plans, can be assigned to users by access level, Basic + Test Plans.

  1. Sign in to your organization (https://dev.azure.com/{yourorganization}) as Project Administrator, Project Collection Administrator, or organization Owner.

    Why am I asked to choose between my work or school account and my personal account?

  2. Open your project, and then select Project settings > Teams. Then, select your project.

    The Projects page

  3. Select Add to invite members to your project.

    On your project home page, select Invite a friend

  4. Add users or groups, and then choose Save.

    Project members list

    Enter the email addresses of the new users, separated by semicolons, or enter the display names of existing users. Add them one at a time or all at once.

Tip

For more information, see Add users to a project and Add users to a team.

Manage users

From your web browser you can view and edit certain user information. From the Azure DevOps CLI command, you can see details about a specific user and update their access level.

The Users view shows key information per user in a table. In this view, you can do the following tasks:

  • See and modify assigned service extensions and access levels.
  • Multi-select users and bulk edit their extensions and access.
  • Filter by searching for partial user names, access level, or extension names.
  • See the last access date for each user. This can help you choose users to remove access from or lower access to stay within your license limits. For more information, see Manage access with Azure AD.

Note

To enable the new user interface for the New user hub, see Enable preview features.

  1. Sign in to your organization (https://dev.azure.com/{yourorganization}).

  2. Select gear icon Organization settings.

    Open Organization settings

  3. Select Users.

    .

  4. Select a user or group of users. Then, select the ... icon at the end of the Name column to open the context menu.

    In the context menu, select one of the following options:

    • Change access level

    • Manage user

    • Resend invite

    • Remove direct assignments

    • Remove from organization (deletes user)

      Select Users, and then select an item in the context menu

  5. Save your changes.

FAQs for adding users

Q: Which email addresses can I add?

A:

Add members' sign-in addresses or display names

After you add members to your project, each member gets an invitation email that links to your organization. They can use this link to sign in to your organization and find your project. First-time members might be asked for extra details when they sign in to personalize their experience.

Q: What if they don't get or lose the invitation email?

A:

  • Organizations connected to Azure AD: If you're inviting users from outside your Azure AD, they must use the email. Removing users from the organization removes both their access and their license. However, any artifacts that were assigned to them remain unchanged. You can always invite users back into the organization if they exist in the Azure AD tenant. After they're removed from Azure AD, you can't assign any artifacts (work items, pull requests, and so forth) to them. We preserve the history of artifacts that have already been assigned to the users.

  • Organizations with Microsoft accounts: You can send a link to the project page, which the email contains, to the new team members. Removing users from the organization removes both their access and their licenses. You can no longer assign any artifacts (work items, pull requests, and so forth) to these users. However, any artifacts that were assigned to them remain unchanged.

Q: Why can't I add any more members?

A: See Q: Why can't I add any more members to my project?.

Q: How is access different from *permissions?

A: Access levels control which features are available to users. Permissions control a user's access to organization resources. To learn more, see Default permissions and access.