Setting Shared Query Permissions in Azure DevOps

Question

My team is implementing Azure DevOps 2019 server on prem. There is a requirement to give all valid users permission to create shared queries in all projects. Is it possible to set permissions for shared queries at the collection level?

Answer 1

The permissions for shared queries are managed within the queries itself, and whilst the default permissions allow for the built in Project Administrators (and Project Collection Administrators) group to contribute shared queries, you probably don't want to move everyone into one of those groups.

Instead, you would have to go into each team project, go to the queries, and edit the security on the root: ]

You can then grant permissions by group (built in or custom): (So above, I've changed the built in "contributors" group to allow them to Contribute to queries, which allows them to create new)

Depending on how many team projects you have or create, will depend how manageable the is as a workaround, but it is safer than making everyone an admin 😉