Add a data source - Azure DevOps

Vault Radar allows you to connect to any organization on Azure DevOps cloud.

Prerequisites

To establish a connection, you need the following:

Organization and project name
User email
Access token with the right set of scopes
- Code > Read
- Entitlements > Read
- Graph > Read
- Identity > Read
- Member Entitlement Management > Read
- Notifications > Read, Write, Manage
- Project and Team > Read
- Service Connections > Read
- User Profile > Read
- Work Items > Read, Write

Create a connection with Azure DevOps

Select Settings/Data Sources.
Click on the Azure DevOps Cloud button.
Enter the organization name in the Organization text field.
Enter the project name in the Project text field.
Enter the user email and the access token value.
Personal Access Token
Refer to the Azure DevOps documentation for an instructions to create a personal access token.
Click Next.

Add repositories to Vault Radar

Once the connection had been established, you can select which repositories you want to install by selecting a group or all.

Note

Vault Radar has a limit of 5000 repositories per connection. If you have more then 5000 repositories, Vault Radar will select the 5000 repositories with the most recent activity.

Assign a group to a resource

Once a data source has been added, an HCP user with the admin role must assign a group to each of the monitored resources within each data source. Each resource can be assigned to only one group.

Note

Users with the HCP IAM admin role do not need to be added to a group. Accounts with the admin role have full access to Vault Radar.

Create a group at the HCP project level.
Assign either the viewer or contributor role to the group.
Navigate to the resource and click Add to group.
Select the group that requires access to the resource.