Forum Discussion

sovanrout's avatar
sovanrout
Copper Contributor
Feb 19, 2024

Simplifying User Management Across Multiple Organizations in Azure DevOps Portal

In our Azure DevOps portal, we currently manage 32 organizations, each requiring Basic access for users at approximately $6 per user. However, navigating and searching for specific users across these numerous organizations can be time-consuming and inefficient, particularly when handling requests to remove user access. We seek a streamlined solution to efficiently locate and manage users across all organizations so that we can easily locate a user from all the organizations and iff needed we can remove a user from all the org. in a one page.

1 Reply

  • Take this:

     

    1. Microsoft Entra ID (formerly Azure Active Directory) Integration

     

    • Use Entra ID groups to manage user access centrally.
    • Assign users to Azure DevOps organizations via group membership.
    • Remove a user from a group to revoke access across all linked organizations.

     

    1. Azure DevOps REST API Automation

    You can build a custom dashboard or script using the Azure DevOps REST API to:

    • Query user lists across all organizations.
    • Search for a specific user.
    • Remove the user from all organizations programmatically.

     

    1. Azure DevOps CLI

    The Azure DevOps CLI allows scripting user management tasks:

    az devops user remove --user <user-email> --org https://dev.azure.com/<org-name>
    

     

    1. Custom Portal or Dashboard

    Develop a web-based internal tool that:

    • Authenticates with Azure DevOps using a PAT (Personal Access Token).
    • Lists all users across organizations.
    • Allows search and bulk removal.
    • Uses REST API under the hood.

Resources