Azure.DevOps.Pipelines.Releases.Definition.InheritedPermissions

---

category: Microsoft Azure DevOps Repos severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Releases.Definition.InheritedPermissions.md

Azure.DevOps.Pipelines.Releases.Definition.InheritedPermissions

SYNOPSIS

Release Pipeline permissions should not be inherited from the project.

DESCRIPTION

Release Pipeline permissions should not be inherited from the project. Inherited permissions can lead to unexpected access to resources.

Mininum TokenType: FineGrained

RECOMMENDATION

Consider removing inherited permissions from the release pipeline and setting permissions explicitly.

LINKS

• Azure DevOps Security best practices