Azure.DevOps.Pipelines.Environments.ProjectValidUsers

---

category: Microsoft Azure DevOps Environments severity: Severe online version: https://github.com/cloudyspells/PSRule.Rules.AzureDevOps/blob/main/src/PSRule.Rules.AzureDevOps/en/Azure.DevOps.Pipelines.Environments.ProjectValidUsers.md

Azure.DevOps.Pipelines.Environments.ProjectValidUsers

SYNOPSIS

Environments should not be assigned directly to the Project Valid Users group.

DESCRIPTION

Environments should not be assigned directly to the Project Valid Users group. This group is inherited by all users in the project and will grant access to the environment to all users.

Mininum TokenType: FineGrained

RECOMMENDATION

Remove the Project Valid Users group from the environment acl.

LINKS

• Azure DevOps Security best practices