Change application access policies for your account

Last Update: 1/10/2017

Team Services

Visual Studio Team Services offers the capability for other apps to integrate with its services and resources in your Team Services account. To access your account without asking for user credentials multiple times, apps can use these authentication methods:

By default, your Team Services account allows access for all authentication methods. You can limit access, but you must specifically restrict access for each method. When you deny access to an authentication method, no app can use that method to access your account. Any app that previously had access will get an authentication error and can't access your account.

To remove access for personal access tokens, you must revoke them.

To continue, you'll need at least Basic access and Team Services account owner permissions. How do I find the account owner?

  1. Sign in as the account owner to your Visual Studio Team Services account (https://{youraccount}.visualstudio.com).

    Why am I asked to choose between my work or school account and my personal account?

  2. From your account toolbar, go to Settings.

    Click the gear icon, go to Settings

  3. Review your application connection settings. Change these settings, based on your security policies.

    Under Application Connections, change each setting as necessary, save your changes

    Need help?

Q&A

Q: How do personal access tokens differ from alternate authentication credentials?

A: Personal access tokens are a more convenient and secure replacement for alternate authentication credentials. You can limit a token's use to a specific lifetime, a Visual Studio Team Services account, and to scopes of activities that the token authorizes. Learn more about personal access tokens here.

Q: If I deny access to one authentication method in one Visual Studio Team Services account, does that affect all the accounts I own?

A: No, you can still use that method in all the other Visual Studio Team Services accounts that you own. Personal access tokens apply to specific accounts or to all accounts, based on your selection when you created the token.

Q: If I deny access to an authentication method, then allow access again, will the apps that need access continue to work?

A: Yes, those apps will continue working.

Q: What apps integrate with Visual Studio Team Services?

A: Find the apps that integrate with Visual Studio Team Services here.

Q: How do I find the account owner?

If you have at least Basic access, you can find the current owner in your Team Services account settings.

  1. Go to your Team Services account settings.

    Go to account settings

  2. Under Settings, find the current owner.

    Find current owner

Q: Why don't I see the Team Services accounts that I own after I sign in to my Visual Studio profile on visualstudio.com?

A: The list of accounts that you own are associated with the identity that you use to sign in to Visual Studio Team Services.

If you were asked to choose between your personal Microsoft account, or your work or school account when you signed in, you might have selected the wrong identity.

Choose work or school account, or personal Microsoft account

Please try signing out completely from Team Services, then sign in again, and select your other identity.

Here's how you can sign out completely because just closing your browser doesn't always sign you out completely from Team Services:

  1. Close all browsers, including those that aren't running Team Services.

  2. Open a private or incognito browsing session.

  3. Go to this URL: http://aka.ms/vssignout

    You'll get a message that says "Sign out in progress". After you're signed out, you're redirected to the Visual Studio page @www.visualstudio.com.

    Tip If the sign-out page takes more than a minute, close the browser, and continue.

  4. Sign in to Visual Studio Team Services again. Select your other identity.

Q: Why must I choose between a "work or school account" and my "personal account"?

A: This happens when you sign-in with an email address, like jamalhartnett@fabrikam.com, that's shared by your personal Microsoft account and by your work account or school account. Although both identities use the same sign-in address, they're still separate identities with different profiles, security settings, and permissions, so you see this screen when you sign in:

Choose work or school account, or personal Microsoft account

  • Choose Work or school account if you used this identity to create your Team Services account or signed in with this identity before. For example, choose this option if you used to sign in to Team Services here:

    Old signin for work or school accounts

    Your identity is authenticated by your organization's directory in Azure Active Directory (Azure AD), which controls access to your Team Services account.

  • Choose Personal account if you used your Microsoft account with Team Services. For example, choose this option if you used to sign in to Team Services here:

    Old signin for Microsoft account

    Your identity is authenticated by the global directory for Microsoft accounts.

Q: Why can't I sign in after I choose either "personal Microsoft account" or "work or school account"?

A: This happens when your sign-in address is shared by your personal Microsoft account and by your work account or school account, but your selected identity doesn't have access. Although both identities have the same sign-in address, they're still separate identities with different profiles, security settings, and permissions.

Please try signing out completely from Team Services by following the steps below because just closing your browser might not sign you out completely from Team Services. Then sign in again to Team Services, and select your other identity:

  1. Close all browsers, including those that aren't running Team Services.

  2. Open a private or incognito browsing session.

  3. Go to this URL: http://aka.ms/vssignout

    You'll get a message that says "Sign out in progress". After you're signed out, you're redirected to the Visual Studio page @www.visualstudio.com.

    Tip If the sign-out page takes more than a minute, close the browser, and continue.

  4. Sign in to Team Services again. Select your other identity.

Q: How do I get help or support for Team Services?

A: Try the Team Services forum or Team Services Support.