Question 191 · 540 in bank
DRAG DROP - You need to deploy a new project in Azure DevOps that has the following requirements: * The lead developer must be able to create repositories, manage permissions, manage policies, and contribute to the repository. * Developers must be able to contribute to the repository and create branches, but NOT bypass policies when pushing builds. * Project managers must only be able to view the repository. * The principle of least privilege must be used. You create a new Azure DevOps project team for each role. To which Azure DevOps groups should you add each team? To answer, drag the appropriate groups to the correct teams. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Show the answer figure
Answer: See figure below
Explanation
Box 1: Readers - Project managers must only be able to view the repository. Only read permission necessary. Box 2: Project Administrators - The lead developer must be able to create repositories, manage permissions, manage policies, and contribute to the repository. Add to the Project Collection Administrators security group users tasked with managing organization or collection resources. Box 3: Contributors - Developers must be able to contribute to the repository and create branches, but NOT bypass policies when pushing builds. Add to the Contributors security group full-time workers who contribute to the code base or manage projects. Reference: https://docs.microsoft.com/en-us/azure/devops/organizations/security/look-up-project-collection-administrators
Source: Adapted from community discussion — zellck
