Azure Devops Not allowed to approve PR's

[pottheed]

I am configuring a devops project. I have users assigned via an AD group with the "reader" permissions with view only so they cannot commit code, only view.

However when a Pull Request is raised they can approve, as part of the minimum required approvers of 2. Is there a way of them not being able to do this? or even not having the "approve" button visible?

Thanks in advance

[#2]

Hi @pottheed,

Yes, this is possible. The problem you are probably facing is that the built-in reader group has pull request contribution permissions:

Go to the project settings:
1. Go to repositories

2. Select the Reader group, or your custom group

3. Set 'contribute to pull requests' to not set.

This results in a hidden approve/complete button: