Set permissions and access for testing

Azure DevOps Services | Azure DevOps Server 2022 - Azure DevOps Server 2019

To exercise the full features of Azure Test Plans, you must be granted Basic + Test Plans access level or have one of the following subscriptions:

• Enterprise
• Test Professional
• MSDN Platforms

In addition, you can grant or restrict access to various manual test features by granting users or groups specific permissions for an object or project. Many test artifacts correspond to test-specific work item types. So, work-tracking permissions apply to test-specific work items, such as test plans, test suites, test cases and more. You set permissions for work items and manual testing features for area paths and at the project-level. You set permissions to manage test controllers at the organization or collection level. Test controllers are used in performing load tests.

• Object-level, Area path level
  • Edit work items in this node: Add or edit test-specific work items, such as test plans, test suites, test cases, shared steps, or shared parameters.
  • Manage test plans: Modify test plan properties such as build and test settings.
  • Manage test suites: Create and delete test suites, add, and remove test cases from test suites, change test configurations associated with test suites, and modify a test suite hierarchy (move a test suite).
• Project-level
  • Manage test configurations: Add or edit test configurations and configuration variables.
  • Manage test environments: Add or edit test plan settings.
  • Create test runs: Run manual tests
  • Delete and restore work items: Delete test-specific work items
  • Delete test runs: Delete test results
  • Manage test configurations: Add or edit test configurations and configuration variables.
  • Manage test environments: Add or edit test plan settings.
  • Move work items out of this project: Move work items from one project to another
  • Permanently delete work items: Permanently delete test-specific work items
• Organization or collection-level
  • Manage test controllers: Permission associated with a deprecated feature for TFS 2018 and later versions. To learn more, see Overview of test agents and test controllers for running load tests and Install test agents and test controllers.

Prerequisites

• To manage access levels or organization-level permissions, you must be a member of the Project Collection Administrators security group, or have your Edit instance-level information set to Allow.
• To manage project or object-level test-related permissions, you must be a member of the Project Administrators security group.

For more information, see the following articles:

• About access levels
• Add organization users and manage access
• Change access levels for users or groups
• Change project-level permissions
• Change project collection-level permissions

Grant access to manual testing features

To have full access to the Test feature set, your access level must be set to Basic + Test Plans. Users with Basic access and with permissions to permanently delete work items and manage test artifacts can only delete orphaned test cases.

Manage test plans and test suites under an area path

Area path permissions let you grant or restrict access to edit or modify test plans or test suites assigned to those areas. You can restrict access to users or groups.

In addition to the project-level permissions set in the previous section, team members need permissions to manage test artifacts, which are set for an area path.

Open the Security page for area paths and choose the user or group you want to grant permissions.

Set the permissions for Manage test plans and Manage test suites to Allow.

Set permissions to create and delete test artifacts

While test artifacts such as test plans, test suites, test cases, and so on, are types of work items, the method for deleting them differs from deleting nontest work items.

Important

We only support permanent deletion of test artifacts such as test plans, test suites, test cases, shared steps and shared parameters. Deleted test artifacts won't appear in the recycle bin and cannot be restored. Deletion of test artifacts not only deletes the selected test artifact but also all its associated child items such as child test suites, test points across all configurations, testers (the underlying test case work item doesn't get deleted), test results history, and other associated history.

When you delete test artifacts, the following actions occur:

1. Removes the deleted test artifact from the test case management (TCM) data store and deletes the underlying work item
2. Runs a job to delete all the child items both from the TCM side and the underlying work items. This action may take time (up to a few minutes) depending on the number of artifacts to be deleted.
3. Causes all information in the work item tracking data store and TCM data store to be deleted and can't be reactivated or restored.

You must be a member of the Project Administrators group or have the Delete test artifacts permission set to Allow. You must also have your access level set to Basic + Test Plans or Visual Studio Enterprise, which provides access to the full Test feature set. Users with Basic access and with permissions to permanently delete work items and manage test artifacts can only delete orphaned test cases. That is, they can delete test cases created from Work that aren't linked to any test plans or test suites.

Note

To enable the Project Permissions Settings Page preview page, see Enable preview features.

In this example, we grant members assigned to the Team Admin group permissions to create and view test runs and manage test configurations and environments.

Preview page

Current page

---

Related articles

• Grant or restrict access
• Set permissions and access for work tracking
• Permissions and groups reference
• Troubleshoot permissions