Setting up AAD Policies in Azure DevOps

This post details the application of Azure Active Directory (AAD) policies within Azure DevOps. It explains how to assign the 'Azure DevOps Administrator' role in AAD to a custodian user, enabling them to configure organization-wide policies. These policies include 'Restrict Org Creation', 'Restrict Global PAT Creation', 'Restrict Full-Scoped PAT Creation', and 'Enforce Maximum PAT Lifespan'. The post provides screenshots illustrating the role assignment process and the available policy settings for both normal users and administrators within Azure DevOps.