{"id":3060,"date":"2022-12-29T03:13:49","date_gmt":"2022-12-29T03:13:49","guid":{"rendered":"https:\/\/blog.coursemonster.com\/?p=3060"},"modified":"2024-04-17T06:48:27","modified_gmt":"2024-04-17T06:48:27","slug":"pat-scopes-are-now-supported-by-all-azure-devops-rest-apis","status":"publish","type":"post","link":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/","title":{"rendered":"PAT Scopes are now Supported by all Azure DevOps REST APIs"},"content":{"rendered":"\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg\" alt=\"Security Considerations For Your 2022 CI\/CD Services Can Find Their Peace In Azure DevOps\"\/><\/figure>\n\n\n\n<p>The Azure DevOps team recently implemented a change to connect all of their REST APIs with a specific personal access token ( PAT ) scopes as part of their efforts to improve security. Before this change, some of these APIs were not tied to a PAT scopes, which could potentially lead to customers using full-scoped PATs to access them. Full-scoped PATs grant access to all the permissions of the corresponding user and could be misused by malicious actors to access sensitive information such as source code or production infrastructure. By associating these APIs with a PAT scope, the Azure DevOps team is reducing the risks associated with a compromised PAT credential.<\/p>\n\n\n\n<p>If you are using a full-scoped personal access token (PAT) to authenticate to an Azure DevOps REST API, you should consider switching to a PAT with a more specific scope to limit access. The specific scopes accepted by each API are listed in the &#8220;Security&#8221; section of the API&#8217;s documentation. By using a PAT with the appropriate scope, you can avoid granting unnecessary access.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/devblogs.microsoft.com\/devops\/wp-content\/uploads\/sites\/6\/2022\/11\/scopeInApiDocs-1.png\" alt=\"PAT Scope in REST API Docs Example\"\/><\/figure>\n\n\n\n<p>Additionally, these improvements should allow more customers to prevent the creation of full-scoped personal access tokens (PATs) by enabling the corresponding control plane policy.<\/p>\n\n\n\n<p>Want to know more about Microsoft Azure? <a href=\"https:\/\/www.coursemonster.com\/training-courses\/azure-stack-hci\">Visit our course now. <\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>Here at&nbsp;<a href=\"https:\/\/www.coursemonster.com\/\">CourseMonster<\/a>, we know how hard it may be to find the right time and funds for training. We provide effective&nbsp;<a href=\"https:\/\/www.coursemonster.com\/training-courses\/all-brands\">training programs<\/a>&nbsp;that enable you to select the training option that best meets the demands of your company.<\/p>\n\n\n\n<p>For more information,&nbsp;<a href=\"https:\/\/www.coursemonster.com\/enquire\">please get in touch<\/a>&nbsp;with one of our course advisers today or contact us at training@coursemonster.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Azure DevOps team recently implemented a change to connect all of their REST APIs with a specific personal access token ( PAT ) scopes as part of their efforts to improve security. Before this change, some of these APIs were not tied to a PAT scopes, which could potentially lead to customers using full-scoped PATs to access them. Full-scoped PATs grant access to all the permissions of the corresponding user and could be misused by malicious actors to access&#8230;<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[97],"tags":[98,26],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog<\/title>\n<meta name=\"description\" content=\"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog\" \/>\n<meta property=\"og:description\" content=\"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/\" \/>\n<meta property=\"og:site_name\" content=\"Course Monster Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-12-29T03:13:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-17T06:48:27+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg\" \/>\n<meta name=\"author\" content=\"Marbenz Antonio\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marbenz Antonio\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/\",\"url\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/\",\"name\":\"PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.coursemonster.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg\",\"datePublished\":\"2022-12-29T03:13:49+00:00\",\"dateModified\":\"2024-04-17T06:48:27+00:00\",\"author\":{\"@id\":\"https:\/\/blog.coursemonster.com\/#\/schema\/person\/65842e37a3f3b0b4c75de18f1315655d\"},\"description\":\"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage\",\"url\":\"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg\",\"contentUrl\":\"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.coursemonster.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PAT Scopes are now Supported by all Azure DevOps REST APIs\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.coursemonster.com\/#website\",\"url\":\"https:\/\/blog.coursemonster.com\/\",\"name\":\"Course Monster Blog\",\"description\":\"IT Training Course Certifications with Guaranteed results!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.coursemonster.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.coursemonster.com\/#\/schema\/person\/65842e37a3f3b0b4c75de18f1315655d\",\"name\":\"Marbenz Antonio\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.coursemonster.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/316755c884e2af616297bfb2e553f182?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/316755c884e2af616297bfb2e553f182?s=96&d=mm&r=g\",\"caption\":\"Marbenz Antonio\"},\"sameAs\":[\"http:\/\/www.coursemonster.com\"],\"url\":\"https:\/\/blog.coursemonster.com\/author\/mantonio\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog","description":"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/","og_locale":"en_US","og_type":"article","og_title":"PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog","og_description":"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...","og_url":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/","og_site_name":"Course Monster Blog","article_published_time":"2022-12-29T03:13:49+00:00","article_modified_time":"2024-04-17T06:48:27+00:00","og_image":[{"url":"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg"}],"author":"Marbenz Antonio","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Marbenz Antonio","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/","url":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/","name":"PAT Scopes are now Supported by all Azure DevOps REST APIs - Course Monster Blog","isPartOf":{"@id":"https:\/\/blog.coursemonster.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage"},"image":{"@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage"},"thumbnailUrl":"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg","datePublished":"2022-12-29T03:13:49+00:00","dateModified":"2024-04-17T06:48:27+00:00","author":{"@id":"https:\/\/blog.coursemonster.com\/#\/schema\/person\/65842e37a3f3b0b4c75de18f1315655d"},"description":"Personal Access Token (PAT) scopes refer to the permissions or access rights granted to a Personal Access Token in a software...","breadcrumb":{"@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#primaryimage","url":"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg","contentUrl":"https:\/\/u5k4i4a4.stackpathcdn.com\/wp-content\/uploads\/2020\/02\/DevOps2020.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/blog.coursemonster.com\/pat-scopes-are-now-supported-by-all-azure-devops-rest-apis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.coursemonster.com\/"},{"@type":"ListItem","position":2,"name":"PAT Scopes are now Supported by all Azure DevOps REST APIs"}]},{"@type":"WebSite","@id":"https:\/\/blog.coursemonster.com\/#website","url":"https:\/\/blog.coursemonster.com\/","name":"Course Monster Blog","description":"IT Training Course Certifications with Guaranteed results!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.coursemonster.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.coursemonster.com\/#\/schema\/person\/65842e37a3f3b0b4c75de18f1315655d","name":"Marbenz Antonio","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.coursemonster.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/316755c884e2af616297bfb2e553f182?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/316755c884e2af616297bfb2e553f182?s=96&d=mm&r=g","caption":"Marbenz Antonio"},"sameAs":["http:\/\/www.coursemonster.com"],"url":"https:\/\/blog.coursemonster.com\/author\/mantonio\/"}]}},"_links":{"self":[{"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/posts\/3060"}],"collection":[{"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/comments?post=3060"}],"version-history":[{"count":3,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/posts\/3060\/revisions"}],"predecessor-version":[{"id":4832,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/posts\/3060\/revisions\/4832"}],"wp:attachment":[{"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/media?parent=3060"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/categories?post=3060"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.coursemonster.com\/wp-json\/wp\/v2\/tags?post=3060"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}