Restrict new user invitations from Project and Team Administrators

Azure DevOps Services

By default, all administrators can invite new users to their Azure DevOps organization. Disabling this policy blocks Team and Project Administrators from inviting new users. Project Collection Administrators (PCAs) can add new users to the organization, regardless of the policy status. If a user is already a member of the organization, Project and Team Administrators can add that user to a project.

Prerequisites

You must be a Project Collection Administrator to manage this policy.

Turn off policy

  1. Sign in to your organization (https://dev.azure.com/{yourorganization}).

  2. Select gear icon Organization settings.

    Open Organization settings

  3. Under Security, select Policies, and then move the toggle to off.

    Turn policy off to limit Team and Project administrators from inviting new users

Now, only Project Collection Administrators can invite new users to Azure DevOps.

Note

Known limitation: Even with the policy turned off, Team and Project Administrators can re-invite users who were previously members of the organization.