Introduction

To enable the Azure DevOps connector, you need a service account along with two pieces of information: a ADO organization name and a personal access token (PAT). DX provides three separate connectors—for Boards, Pipelines, and Repos—which can be set up independently using separate service accounts for higher rate limits.

See the schema reference for ADO >

Steps to connect

Step 1 must be completed by an Azure admin.

Step 1

Go to the Azure portal and create a service account in Microsoft Entra ID (formerly Azure Active Directory). Then, assign the service account to an ADO organization and grant them permissions.

Step 2

Log into ADO using the service account and generate a Personal Access Token. Grant the token read permissions as outlined below.

Connection Type	Permissions
ADO Boards	Work Items (read), Graph (read), Identity (read), Project and Team (read), Release (read) and Task Groups (read).
ADO Pipelines	Build (read), Graph (read), Identity (read), Project and Team (read), Release (read) and Task Groups (read)
ADO Repositories	Code (read), Graph (read), Identity (read), Project and Team (read), Release (read) and Task Groups (read).

ℹ️ We request the same base scopes for multiple connections since it allows each connection to work independently to get the core data for projects, teams etc.

Step 3

Navigate to the Data Cloud > Connections screen within DX, then add a connection using your credentials generated in the previous steps.

Errors

This table lists error codes that you may encounter when adding a connection in DX.

Error	Description
`invalid_credentials`	Your API credentials entered are not valid.
`invalid_permissions`	Your API token does not have the permissions required by DX.
`no_resources`	Your service account does not have access to any projects or repositories.