Restrict new user invitations from Project and Team Administrators
Azure DevOps Services
By default, all administrators can invite new users to Azure DevOps. Disabling this policy will block Team and Project Administrators from inviting new users. Project Collection Administrators (PCAs) can add new users to the organization, regardless of the policy status.
You must be a Project Collection Administrator to manage this policy.
Turn policy off
Sign in to your organization (
Select Organization settings.
Under Security, select Policies, and then move the toggle to off.
Now, only Project Collection Administrators can invite new users to Azure DevOps.