search

ParabolInc / parabol

Free online agile retrospective meeting tool
https://www.parabol.co/
Other
1.92k stars 333 forks source link

Review Azure Devops permissions #10252

Open ackernaut opened 2 months ago

ackernaut commented 2 months ago

A user 🔒 wrote in:

We are trying to do an ADO integration for running Sprint Planning sessions. ADO is managed by the company and the Scrum Masters are provided admin rights only to certain projects. Due to this constraint, we are not able to integrate Parabol with ADO, and it prevents us from bringing User Stories in for Sprint Poker.

Is it possible to change the permissions so that a user doesn’t need admin rights to add the integration for use with Sprint Poker?

Would this be appropriate from a security standpoint? Do we have any options here?

Dschoordsch commented 2 months ago

I assume this is a limitation of how we publish this integration. Because each client needs to add a custom app to their ADO organization, the setup needs admin rights. I'm not deep enough in the ADO world to be sure, but I would assume that if we would publish a proper app in the ADO marketplace, that this could reduce the necessary permissions to set it up (unless their admin forbids running apps in general).