Azure-pipelines-tasks: Share Service Connections between projects

[JoshLarkin]

I am requesting a feature that will enable sharing service connections between projects.

[kilasuit]

Hey @JoshLarkin - Love this request although this isn't the correct place to put a feature request for Azure Pipelines but more for any issues with current pipeline tasks

You can however raise this correctly via https://developercommunity.visualstudio.com/ as mentioned in the following blog post - https://devblogs.microsoft.com/devops/azure-devops-feature-suggestions/

[Lovakumar]

@JoshLarkin we are currently working sharing service connections feature and it will be available 3-4 months from now.

[JoshLarkin]

Sounds great. Thanks for the information.

From: Lova Kumar Katikala [e-mail]
Sent: Monday, February 25, 2019 12:25 AM
To: Microsoft/azure-pipelines-tasks [e-mail]
Cc: Josh Larkin [e-mail]; Mention [e-mail]
Subject: Re: [Microsoft/azure-pipelines-tasks] Share Service Connections between projects (#9673)

@JoshLarkinhttps://github.com/JoshLarkin we are currently working sharing service connections feature and it will be available 3-4 months from now.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/Microsoft/azure-pipelines-tasks/issues/9673#issuecomment-466876193, or mute the threadhttps://github.com/notifications/unsubscribe-auth/APgcXKztPjFxG2nVsvjeJ8JlQI00Jxf3ks5vQ3OSgaJpZM4bN6Gc.

[AAOE 2019 Annual Conference]http://www.exscribe.com
NOTICE: This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of the sender and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please notify the sender immediately at 866-870-1521 and permanently delete this email and any attachments. Exscribe, Inc. 5 W. Fourth Street, Bethlehem, PA 18015. Exscribe, Inc.http://www.exscribe.com

[JBrLloyd]

Hi @Lovakumar, any updates on this one?
Thanks!

[Lovakumar]

@JBrLloyd we are in the last leg of implementation. It will take another month to roll it out publicly. Having said that if you are ok to dogfood this feature, let me know your Azure DevOps account name so that we can enable early feature flag on your account.

[JBrLloyd]

@Lovakumar No worries, we'll wait for the feature to be public. Thank-you for the update though!

[JO3-W3B-D3V]

@Lovakumar thank the lord! ... Well I thank you & your team actually...

[PrPetrow]

@Lovakumar was this feature released?

I expected to see it in Update 1 (https://docs.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2019u1?view=azure-devops#rc2-release-date-july-23-2019) but there is nothing like this.

[Lovakumar]

@PrPetrow this feature isn't released in Update 1. We are still working on few UX designs and will wrap up it a month.

[PrPetrow]

@Lovakumar thanks for the update. Just one more question, is there going to be a new on-premise DevOps server release with this feature or it will firstly be released only for the cloud version.

[Lovakumar]

@PrPetrow Firstly it will be released in cloud version and based on the response in cloud version, we will enable it in next on-premise version. There won't be any specific on-premise release just for this one feature.

[merill]

@Lovakumar I'm really, really, interested in this. I have had to write scripts to create duplicate service connections on each project and then it's a nightmare to update them when the keys expire. Can you please add me to the preview? My account name is teamtelstra

[abelal83]

I'd be happy to test this feature out. Please could you enable? My account is clarksonscloud.

[oleksabor]

@Lovakumar Please enable this feature on https://dev.azure.com quipu-cwnet account

[JO3-W3B-D3V]

@Lovakumar I don't suppose there's any update on this feature? I really look forward to using this feature since I'm working on quite the array of projects! 😃

[Lovakumar]

@omeshp can you please enable sharing (old ux) feature flag for accounts mentioned in previous comments.

[omeshp]

@Lovakumar Enabled the feature for quipu-cwnet, clarksonscloud and teamtelstra accounts.

[abelal83]

This is awesome guys. I honestly can't tell you how much work this will save us!

Is there any chance task groups can also be shared across projects?

[merill]

Legends. Thanks guys!!!
Just tried it and love it! @Lovakumar @omeshp

[manospasj]

@omeshp Can we please enable this for gastag account?

[Lovakumar]

@abelal83 task groups sharing is not in our backlog.

[JO3-W3B-D3V]

@Lovakumar out of curiosity, is there any chance that such a feature will end up on your backlog?

[abelal83]

Task group sharing would be fantastic. For builds it's not a big deal for us however, releases are a nightmare. We have standard set of release policies that must be followed, you can imagine the pain we go through updating all the releases across all projects. Please add task group sharing to your backlog!

[omeshp]

@manospasj Done.

[manospasj]

@omeshp @Lovakumar I just tried it and sharing works fine. Although, if you share a connection and then try to untick all shared projects from this connection, the connection itself gets deleted even from the original project that was created.

[Lovakumar]

Task group sharing would be fantastic. For builds it's not a big deal for us however, releases are a nightmare. We have standard set of release policies that must be followed, you can imagine the pain we go through updating all the releases across all projects. Please add task group sharing to your backlog!

Adding @ashokirla @shashban to track this feature request.

[Lovakumar]

@omeshp @Lovakumar I just tried it and sharing works fine. Although, if you share a connection and then try to untick all shared projects from this connection, the connection itself gets deleted even from the original project that was created.

@omeshp can you please take a look at it. This looks to be serious bug.

[MarwaMBK]

@omeshp Can we please enable this for sdxcloud account ?

[dusan-suchon]

Is there any update? When could we have service connection sharing feature available? Thanks

[shashban]

@ashokirla Can you please do the needful?

[qmalexander]

Hi, What is the status?

Br
Alexander

[sameera]

@Lovakumar @ashokirla Guys anyway to get this feature enabled without posting our corporate account here publicly? :)
We have many many projects in our account.

[mmikkelson]

@omeshp can you please enable for account wmsand?

[shashban]

@ashokirla Please confirm if this open for a private preview

[ashokirla]

We have completed service connection sharing work and are doing some fit and finish. We can now enable private preview of this feature. Please share your organization details so that we can enable this feature.
@mmikkelson : Sure we will enable this feature for your account 'wmsand'.

[iashishmittal]

Sharing service endpoint feature is now enabled in 'wmsand' account

[sameera]

@ashokirla Please enable this for cloudextend account

[MarwaMBK]

@ashokirla Can you please enable this for sdxcloud account ?

[al-alison]

@ashokirla Can you please enable for organization "Edenred-ITECAmericas" ?

[CloudA2Z-Code]

@ashokirla Can you please enable the private preview for this organization "dev.azure.com/unipertestaccount" as well and also let us know its been few months. When we can get this feature publicly available?

Thanks in advance !

[samirageb]

@ashokirla can you please enable for golightstream account?

[JeromeVigne]

Can you add sbd-agora-ipaas organization please?

[slavizh]

@ashokirla can you enable this feature on org SentiaMGMT ?

[ramu20061992]

@ashokirla could you please enable this feature on org transport-logistics?

[Silthus]

Can you please also enable this feature on interhyptest?
Thanks!

[GabrielaLiviero]

Can you please also enable this feature on Vueling organization? Thank you!!

[nlopez59]

Can you please grant me access to the feature too. https://dev.azure.com/Azure-Repo-DBB/

[rafagsiqueira]

@ashokirla or @omeshp Can you please enable this feature on olatreaties? Thank you very much for this!

[JoshLarkin]

@ashokirla Can you please enable this feature on exscribedev

[alex-piccione]

@ashokirla Can you please enable this feature for account alex75 ? Thanks

[naile]

We're super interested in this @ashokirla could you enable this feature for cint? Many thanks!

[sgopishetty-fisv]

We have completed service connection sharing work and are doing some fit and finish. We can now enable private preview of this feature. Please share your organization details so that we can enable this feature.
@mmikkelson : Sure we will enable this feature for your account 'wmsand'.

Can you enable this feature to "fiservcards" organization

[IanBFarrell]

@ashokirla Do you have any update on when this feature will be available publicly?

[adamsmithkld]

@omeshp @ashokirla can you enable this feature for krolldiscovery organization as well?

[amullerhso]

@mmikkelson please enable this feature for 'hint-demo' as well

[mparsons79]

@omeshp please can you enable this feature for metatec-uk and HanleySolutions please? Connection sharing would be awesome.

[DarinMacRae]

@ashokirla Please enable this feature for the acmeaom organization. TIA.

[sameera]

Has anyone received this feature after Dec 17th? :(

[ashokirla]

Hi everyone,

First of all apologies for the delayed response. And thanks a lot for showing interest in this feature.
For a while this feature has been in private preview mode as there are few enhancements to the permission model and we would like to get some feedback on it. We got great feedback and have incorporated that into the feature. We are shipping this feature next sprint (in 3 weeks).

Just in case, based on your requests, I will enable this feature for the below accounts. Please let me know if I missed anyone.
cloudextend,
sdxcloud,
Edenred-ITECAmericas,
unipertestaccount,
golightstream,
sbd-agora-ipaas,
SentiaMGMT,
transport-logistics,
interhyptest,
Vueling,
Azure-Repo-DBB,
olatreaties,
alex75,
cint,
fiservcards,
krolldiscovery,
hint-demo,
metatec-uk,
HanleySolutions,
acmeaom

@iashishmittal to enable them.

[JoshLarkin]

Please include exscribedev

Thanks,

Josh Larkin

[cid:[email protected]]

Clinton J Larkin • Chief Technology Officer
Exscribe, Inc. 5 W. Fourth Street Bethlehem, PA 18015
Phone [phone] Ext 704 • Fax [phone]
[cid:[email protected]]http://www.exscribe.com/[cid:[email protected]]https://twitter.com/ExscribeEHR[cid:[email protected]]https://www.linkedin.com/company/135911[cid:[email protected]]https://www.facebook.com/exscribe/

From: ashokirla [e-mail]
Sent: Wednesday, March 18, 2020 5:43 AM
To: microsoft/azure-pipelines-tasks [e-mail]
Cc: Josh Larkin [e-mail]; Mention [e-mail]
Subject: Re: [microsoft/azure-pipelines-tasks] Share Service Connections between projects (#9673)

Hi everyone,

First of all apologies for the delayed response. And thanks a lot for showing interest in this feature.
For a while this feature has been in private preview mode as there are few enhancements to the permission model and we would like to get some feedback on it. We got great feedback and have incorporated that into the feature. We are shipping this feature next sprint (in 3 weeks).

Just in case, based on your requests, I will enable this feature for the below accounts. Please let me know if I missed anyone.
cloudextend,
sdxcloud,
Edenred-ITECAmericas,
unipertestaccount,
golightstream,
sbd-agora-ipaas,
SentiaMGMT,
transport-logistics,
interhyptest,
Vueling,
Azure-Repo-DBB,
olatreaties,
alex75,
cint,
fiservcards,
krolldiscovery,
hint-demo,
metatec-uk,
HanleySolutions,
acmeaom

@iashishmittalhttps://github.com/iashishmittal to enable them.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHubhttps://github.com/microsoft/azure-pipelines-tasks/issues/9673#issuecomment-600520513, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AD4BYXGIOD6ZIMD4OVDRB3LRICJQ5ANCNFSM4GZXUGOA.

USE CAUTION: This email originated from outside of the Exscribe organization. Do not click links or open attachments unless you recognize the sender and know the contents are safe.
NOTICE: This email and its attachments may contain privileged and confidential information and/or protected health information (PHI) intended solely for the use of the sender and the recipient(s) named above. If you are not the recipient, or the employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any review, dissemination, distribution, printing or copying of this email message and/or any attachments is strictly prohibited. If you have received this transmission in error, please notify the sender immediately at 866-870-1521 and permanently delete this email and any attachments. Exscribe, Inc. 5 W. Fourth Street, Bethlehem, PA 18015. Exscribe, Inc.http://www.exscribe.com

[fortunacio]

@ashokirla can you enable this feature for wololoci organization as well?

[ams0]

can you please enable it for gk-prox and cookingwithazure @ashokirla ? Thanks!

[iashishmittal]

Enabled sharing of service connections for following account:

cloudextend
sdxcloud
Edenred-ITECAmericas
unipertestaccount
golightstream
sbd-agora-ipaas
transport-logistics
interhyptest
Vueling
Azure-Repo-DBB
olatreaties
alex75
cint
fiservcards
krolldiscovery
hint-demo
metatec-uk
HanleySolutions
acmeaom
wololoci
gk-prox
cookingwithazure
exscribedev

@slavizh Cannot find account SentiaMGMT so it is not enabled for it. Can you please check if the name of account is correct?

[fortunacio]

@slavizh I see that wololoci is on the list, but... where is the option to share the connection? also, I can't update isShared property via REST.

[slavizh]

@iashishmittal name was changed. We have done other workaround for now so I do not need the feature right away.

[iashishmittal]

@slavizh I see that wololoci is on the list, but... where is the option to share the connection? also, I can't update isShared property via REST.

Please go through following documentation for understanding how to share service connections
https://docs.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops&tabs=yaml#project-permissions---cross-project-sharing-of-service-connections

IsShared is a read only property which cannot be updated. It is set to true by server when service connection is shared otherwise it is set to false.

[bambuca]

Can you please enable shared connections to linksoftcz?

[allanmoller]

Can you please enable shared connections on allanmoller79 ?

[hermanho]

Can you please enable for organization "o365laio" ?

[iashishmittal]

enabled sharing of service connection for linksoftcz, allanmoller79, o365laio account

[mparsons79]

Enabled sharing of service connections for following account:

cloudextend
sdxcloud
Edenred-ITECAmericas
unipertestaccount
golightstream
sbd-agora-ipaas
transport-logistics
interhyptest
Vueling
Azure-Repo-DBB
olatreaties
alex75
cint
fiservcards
krolldiscovery
hint-demo
metatec-uk
HanleySolutions
acmeaom
wololoci
gk-prox
cookingwithazure
exscribedev

@slavizh Cannot find account SentiaMGMT so it is not enabled for it. Can you please check if the name of account is correct?

Thanks. This feature is great and saving lots of time.

[manishkungwani]

@iashishmittal Hi, can you please enable this feature for https://dev.azure.com/bloomcs.

[felipematheus]

Hello, can you please enable this feature on organization bi-solucoes.

[iamNoah1]

Hello, I would also like to have the feature enabled for https://dev.azure.com/dataonegmbh. Thx a lot :)

[iashishmittal]

enabled sharing of service connection for bi-solucoes, bloomcs, dataonegmbh account

[ebunassar]

Jumping in to request this for https://dev.azure.com/kssdevops if possible. Also, any word on when this will be GA? Thanks in advance!

[iashishmittal]

Enabled sharing of service connections for https://dev.azure.com/kssdevops
We are planning to roll it out as GA soon.
As due to COVID our deployments are also affected so cannot provide a good estimate.

[nmb88]

Sounds like COVID's caused the GA release to be delayed. Could you enable this for https://dev.azure.com/dspartners?

[gahujipo]

Please enable this feature for organization acsdatasystems as well. Thank you in advance.

[ScottMcF-OneMTC]

please enable this for - dev.azure.com/onemtc. Thanks

[iashishmittal]

Enabled sharing of service connections for dspartners, acsdatasystems, onemtc

[smkanadl]

Being very interested to try it out. Can you please enable it for dev.azure.com/acvt?

[iashishmittal]

Enabled sharing of service connections for acvt

[yashwanthmb]

Can you please enable it for odjfs

[iashishmittal]

Enabled sharing of service connections for odjfs

[stealthcold]

Hi, please enabled it for Escribainformatica

[dmglennie-diveplane]

please enable for diveplane

[iashishmittal]

sharing of service connections is enabled for Escribainformatica, diveplane

[Ivan-L]

hi @iashishmittal, please would you enable it for

[JaneTeichmann]

H, Could you please enable the feature to dev.azure.com/localiza?

[boxrick]

Good afternoon, please can you enable this for gregorypennington org.

[iashishmittal]

Sharing service connection is now GA and available to all ADO customers.
Following doc contains all information related to service connection new experience
https://docs.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops&tabs=yaml

[krispenner]

This is great, just searched to see if this was possible - perfect timing :)

I'd prefer the project name not be appended onto the shared service connection name, curious why you chose to do that as there would be no naming conflict to not append it. Just shared 3 service connections across 50 projects and then spent an hour opening every single project and editing each shared service connection to rename them by removing the suffix that is forced on the name. Maybe when sharing there could be an option to specify the name to avoid such a tedious process afterwards?

Otherwise, super awesome! Thank you!

[GeromeRen]

is it possible to share a service connection between different organizations for now?

[krispenner]

@iashishmittal
Do you know why it requires Microsoft.Authorization/roleassignments/write access on the Azure subscription to rename a shared service connection? The user is the Project Administrator for the DevOps project, yet they are unable to rename the shared service connection that is shared with their project.

[vkorrapa]

Hi @iashishmittal, can you please enable this in steelcase account.

[ashokirla]

Service connections sharing is now public.

[alokpatra]

@iashishmittal
Is this feature enabled for on-premise as well?
Am using Azure DevOps Server Version 17.143.28912.1

[yxl5521]

@iashishmittal
HI, Could you please enable the feature to DeltaITAppDevTeam

[JeeDay]

Hi @Lovakumar please enable this feature on https://dev.azure.com/siapep-france account

[apsyio]

Please enable for https://dev.azure.com/apsyapps, thanks!

[rajeshkandati]

Hi @iashishmittal, Could you please enable the feature to dev.azure.com/CRM2CRM ?

[rajeshkandati]

Hi @Lovakumar, Could you please enable the feature to dev.azure.com/CRM2CRM

[logicatwork]

Hi @Lovakumar, Could you please enable the feature to dev.azure.com/CRM2CRM

This feature is now public and you do not have to request it to be turned on.

[rajeshkandati]

@logicatwork can you please point me to the right documentation? Appreciate your response.

[logicatwork]

@logicatwork can you please point me to the right documentation? Appreciate your response.

https://docs.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops&tabs=yaml#organization-level-permissions

[rajeshkandati]

@logicatwork can you please point me to the right documentation? Appreciate your response.

https://docs.microsoft.com/en-us/azure/devops/pipelines/library/service-endpoints?view=azure-devops&tabs=yaml#organization-level-permissions

Thank you.

[shashban]

Closing this issue as the capability is publicly available