Connect Azure DevOps

Connection Setup

Treno requires read-only access to all Azure DevOps Projects that should be monitored and analyzed by Treno. This is done by creating a service account along with a Personal Access Token for Treno to use to authenticate as the service account. Below is the process to create such a service account as well as Personal Access Token.

Create a Service Account

When Treno calls Azure DevOps APIs, it authenticates with a user account. Ideally the account used is not tied to any one individual but rather is dedicated for Treno access. To create a service account with access to Azure DevOps you will need to create a new Microsoft account either in your Active Directory or via Microsoft.com so that you can log in with the user to create a Personal Access Token.

Add Service Account to appropriate projects in Azure DevOps

1. Navigate to https://dev.azure.com/{organization_name}/_settings/users, replacing {organization_name} with your organization name in Azure DevOps. Example: treno-io.

2. Click the Add Users button

3. Enter the Service Account email or principal name

4. Select Basic for access level

5. Select all the projects you want analyzed by Treno

6. Set the Azure DevOps Groups to Project Readers for read-only access.

7. Click Add to have an invite sent to the user account to accept.