Overview
This guide walks you through creating an Azure DevOps Personal Access Token (PAT) to enable the Opriven integration for inspecting repositories, pull requests, work items, pipelines, wikis, and test plans.
Only connect this integration if your team uses Azure DevOps for source control, work items, or pipelines. It is not required for the
Azure
cloud integration.
Set up in Opriven
Go to the Azure DevOps integration setup in the Opriven dashboard.
Prerequisites
An Azure DevOps organization
Permission to create Personal Access Tokens
Access to the projects you want Opriven to inspect
Setup
1
Open Personal Access Tokens
In Azure DevOps, click your profile icon (top right) and select
User Settings > Personal Access Tokens
.
2
Create a new token
Click
+ New Token
Fill in:
Name:
Opriven
Organization:
the organization you want to connect
Expiration:
set according to your org’s rotation policy
Under
Scopes
, select
Custom defined
3
Grant read-only scopes
Select
Read
access only for each of the following scopes. See Microsoft’s
Personal Access Tokens guide
for full details.
Code
(Read)
Work items
(Read)
Build
(Read)
Test Management
(Read)
Wiki
(Read)
Project and team
(Read)
Do not enable any write, manage, or execute scopes.
4
Create and copy the token
Click
Create
, then copy the token value.
The token is only shown once. Copy it before leaving the page.
5
Share the token with Opriven
In the Opriven UI, paste:
Organization URL:
https://dev.azure.com/<your-org>
Personal Access Token:
the token you just created
Click
Connect
.
Permissions and Access
Opriven uses a read-only PAT scoped to the permissions below. No write operations are performed in your Azure DevOps organization.
Scope
Access
Code
Read repositories, branches, pull requests, commits, file contents
Work items
Read work items, queries, iterations
Build
Read build definitions, runs, logs, artifacts
Test Management
Read test plans, suites, and results
Wiki
Read wiki pages and search
Project and team
Read project and team metadata
Tokens are stored encrypted. Azure DevOps PATs have a maximum 1-year lifetime — rotate before expiration by creating a new token and updating the credential in Opriven. Revoke access at any time by deleting the token from
User Settings > Personal Access Tokens
.