All Azure DevOps REST APIs now support PAT scopes

This post announces that all Azure DevOps REST APIs now support granular Personal Access Token (PAT) scopes. Previously, some APIs lacked scope association, leading to the use of full-scoped PATs which pose a significant security risk. The update allows customers to migrate to PATs with specific scopes required by each API, reducing the attack surface if a PAT is leaked. It also enables more customers to restrict the creation of full-scoped PATs via a control plane policy.