Forum Discussion

pottheed's avatar
pottheed
Copper Contributor
Aug 28, 2023

Azure Devops Not allowed to approve PR's

I am configuring a devops project. I have users assigned via an AD group with the "reader" permissions with view only so they cannot commit code, only view.

 

However when a Pull Request is raised they can approve, as part of the minimum required approvers of 2. Is there a way of them not being able to do this? or even not having the "approve" button visible?

 

Thanks in advance

 

Azure DevOps
  • JohnLokerse's avatar
    JohnLokerse
    Copper Contributor
    Aug 31, 2023

    Hi pottheed,

    Yes, this is possible. The problem you are probably facing is that the built-in reader group has pull request contribution permissions:

    Go to the project settings:
    1. Go to repositories

    2. Select the Reader group, or your custom group

    3. Set 'contribute to pull requests' to not set.



    This results in a hidden approve/complete button:

     

     

Resources