Forum Discussion
dparis
Aug 10, 2020Copper Contributor
Security on Azure Devops Self Hosted agent
Hello, Today I have discovered that is possible from the pipeline to deploy software directly on the agents without any kind of authentication, in my case I was able to deploy docker directly on ...
- Dec 07, 2020
You are essentially running the agent using a specific account (the one you used to install the agent). You will have to limit the permission of that account to disallow software installation.
Felix.
felixtsem5
Dec 07, 2020Former Employee
You are essentially running the agent using a specific account (the one you used to install the agent). You will have to limit the permission of that account to disallow software installation.
Felix.