Share via


Set permissions on queries and query folders

Azure DevOps Services | Azure DevOps Server | Azure DevOps Server 2022 | Azure DevOps Server 2020

You can control access to queries by setting permissions, which let you configure users and groups to create, delete, view, and manage shared queries and query folders.

  • My Queries:

    • Create and edit: All users, except users in the Readers group, can create and edit their own queries.
    • View: Only the signed-in user can view queries in their My Queries space.
  • Shared Queries:

    • Permissions: By default, only Project Administrators can create, edit, or change permissions for queries and folders.
    • Team management: Create separate folders for each team under Shared Queries to allow them to manage their own set of shared queries.

For more information, see Organize queries.

Prerequisites

Category Requirements
Access levels At least Basic access.
Permissions - To manage permissions, be a member of the Project Administrators group.
- To create or edit a shared query, have your Contribute permission set to Allow for the shared query folder.
- To change permissions of a query or query folder, have the Manage Permissions permission set to Allow for the query folder.

Users with Stakeholder access can't create or save queries in a shared folder.

Tip

Consider creating a query folder for each team and give the team administrators or the team group query permissions to manage their folder.

Default query permissions

A ✔️ (checkmark) in the following table indicates that the corresponding security group has permission to exercise the task by default.

Task

Readers

Contributors

Project admins


Create and save managed My queries, query charts

✔️

✔️

Create, delete, and save Shared queries, charts, folders

✔️

Set permissions on a new query folder

To set permissions on a new query folder, do the following steps:

Tip

To rename or move a shared query or folder, have Delete permissions and Contribute permissions for the folder where you move the query to.

Set permissions on a shared query

To keep anyone else from modifying a shared query that you create, you might want to set permissions on a specific query. You can set permissions by opening the permissions dialog for the specific query.