add reduce PATs callout

Author: chcomley

docs/organizations/accounts/faq-user-and-permissions-management.yml

@@ -20,6 +20,8 @@ summary: |
   [!INCLUDE [version-lt-eq-azure-devops](../../includes/version-lt-eq-azure-devops.md)]
   
    This article provides answers to frequently asked questions (FAQs) about user and permissions management in Azure DevOps. The FAQs are organized by topic to help you quickly find information about managing users, permissions, access levels, Visual Studio subscriptions, GitHub Enterprise integration, and related administrative tasks.
+
+  [!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
   <a name="general-permissions"></a>
   
 

docs/organizations/accounts/get-list-of-organizations-connected-to-microsoft-entra-id.md

@@ -32,6 +32,8 @@ This list includes essential information such as:
 |**Organization** | Member of an Azure DevOps organization [connected to Microsoft Entra ID](connect-organization-to-azure-ad.md). |
 |**Azure DevOps CLI** | A Microsoft Entra token. For more information, see [Issue Microsoft Entra tokens with Azure CLI](../../cli/entra-tokens.md). |
 
+[!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
+
 ## Get list of organizations
 
 #### [Browser](#tab/browser)

docs/organizations/security/security-overview.md

@@ -17,6 +17,10 @@ ms.date: 02/26/2026
 
 When you're handling information and data, especially in a cloud-based solution like Azure DevOps Services, security should be your top priority. While Microsoft ensures the security of the underlying cloud infrastructure, you're responsible for configuring security within Azure DevOps. This article provides an overview of necessary security-related configurations to protect your Azure DevOps environment against threats and vulnerabilities. 
 
+[!INCLUDE [ai-assistance-callout](../../includes/ai-assistance-callout.md)]
+
+[!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
+
 ## Protect your network and data
 
 Securing your network is crucial when you're working with Azure DevOps. Protect your data and resources from unauthorized access and potential threats. Implement network security and data protection measures to help ensure that only trusted sources can access your Azure DevOps environment. To secure your network when you're working with Azure DevOps, take the following actions:

docs/repos/git/create-pr-status-server-with-azure-functions.md

@@ -28,6 +28,8 @@ For more information about PR status, see [Customize and extend pull request wor
 | **Service Hooks** | [Configure service hooks](#configure-a-service-hook-for-pr-events) for PR events to notify your Azure function when a pull request changes. |
 | **Authentication** | **Microsoft Entra ID token** with the **Code (status)** scope to have permission to change PR status. For more information, see [Microsoft Entra authentication](../../integrate/get-started/authentication/entra.md). |
 
+[!INCLUDE [use-microsoft-entra-reduce-pats](../../includes/use-microsoft-entra-reduce-pats.md)]
+
 ### Create a basic Azure Function to listen to Azure Repos events
 
 [Create your first Azure function](/azure/azure-functions/functions-create-first-azure-function). Then, modify the code in the sample to look like the following code: