Skip to main content

Azure DevOps proof types and permissions

Written by Hyperproof Support
Updated over 3 weeks ago

πŸ“ Note

Hyperproof connects to many third-party systems that frequently change, including the system interface. Contact your System Administrator or the third-party provider for assistance in meeting the requirements to integrate with Hyperproof and collect the proof you need.


Authentication type: OAuth

When you create a Hypersync between Hyperproof and Azure DevOps, you can automatically collect the following proof types:

Azure DevOps proof types and fields

Proof type

Fields

Testable

Deployments in an Environment

Stage, Release, Build, Branch, Deployed By, Approved By, Queued On, Completed On

Yes

Deployment Approval Policy

Enabled, Approval Order, Timeout, Approvers

Approval policies: <Approval policy true or false>

Yes

List of Users

Name, Email, Access Level, Date Added, Last Accessed

Yes

Members in Permission Group

Display Name, Member Of

Yes


​

This Hypersync supports importing a user list for an access review. See Importing a list of application users with a Hypersync for more information.

Additional documentation


πŸ“ Note

You only need to connect Hyperproof to the app once, and then you can create as many Hypersyncs as you need.
​

Additionally, you can create multiple Hypersyncs for a single control or label.


Permissions

The following scopes are required to access data in your Azure DevOps organization:

  • vso.graph

  • vso.memberentitlementmanagement

  • vso.project

  • vso.release (vso.profile is included implicitly since it’s inherited by having vso.release)

Additionally, you must be added to the project at minimum as a Project Reader with Stakeholder Access to pull data related to the project, such as deployments and group members. Currently, external users (external to your Azure and Azure DevOps organization) are not supported.

Revoking permissions previously given to the Azure DevOps Hypersync

  1. From the Authorizations section, click Manage authorizations.

  2. Verify the app name for which you want to revoke access.

  3. Click Revoke and then confirm the action.

Did this answer your question?