| title | Delete, remove users from team, project, organization |
|---|---|
| titleSuffix | Azure DevOps |
| description | Steps for how to delete or remove organization users from Azure DevOps and remove users from a team or project. |
| ms.subservice | azure-devops-organizations |
| ms.topic | how-to |
| ms.assetid | d3a31878-a869-45a9-9bca-f46cc2682596 |
| ms.author | chcomley |
| author | chcomley |
| ms.date | 10/23/2024 |
| monikerRange | <=azure-devops |
[!INCLUDE version-lt-eq-azure-devops]
If users no longer require access to a team, project, or organization, you can remove their access. Removing access ensures that only authorized users can view and interact with your organization's data and resources. This article provides step-by-step instructions on how to remove user access from a team, project, or organization in Azure DevOps. By following these guidelines, you can ensure that your organization's security and resource management practices remain robust and up-to-date.
Important
- Removing a user from a team or project doesn’t remove them from the organization.
- Work items assigned to the user aren't affected by removing their access.
- For Microsoft Entra ID-backed organizations:
- Removing a user from Microsoft Entra ID prevents assigning new artifacts (for example, work items or pull requests) to that user. However, the history of already assigned artifacts is preserved.
- Removing a user from the organization doesn't remove their memberships in any Microsoft Entra groups. If the user is a member of an access-granting Microsoft Entra group, they still have access to Azure DevOps. To completely remove the user, ensure they aren't in any access-granting Microsoft Entra groups. For more information, see Manage access with Microsoft Entra groups.
- For Managed Service Account (MSA)-backed organizations: Removing a user from your MSA-backed organization doesn't remove them from the tenant, and they can be re-added at any time.
[!INCLUDE prerequisites-pca-only]
[!INCLUDE image-differences]
::: moniker range="<=azure-devops"
-
Sign in to your organization:
https://dev.azure.com/{yourorganization}. -
Select
Organization settings.
-
Select Users.
-
Select ... next to the user you want to remove. Then, choose Remove from organization. If this option isn't available, see the prerequisites.
-
Select Remove in the confirmation dialog.
-
If you deleted paid users with Basic or higher features, reduce the users in Organization settings to avoid charges in your next Azure billing cycle.
To reduce or cancel users for the next month, make updates before the last day of the current month. Your bill reflects these changes in the following month, as paid users get billed monthly.
::: moniker-end
::: moniker range=" azure-devops"
Note
The Azure DevOps CLI does not support adding and removing service principals.
Add a user | List users | Remove a user | Update a user | Show users
You can remove a user from an organization by using the az devops user remove command. To get started, see Azure DevOps CLI.
az devops user remove --user
[--org]
[--yes]
- user: The email address or ID of the user.
- org: Azure DevOps organization URL. You can configure the default organization using
az devops configure -d organization=ORG_URL. Required if not configured as default or picked up usinggit config. Example:--org https://dev.azure.com/MyOrganizationName/. - yes: Don't prompt for confirmation.
The following command removes the user with the email address contoso@contoso.com from the contoso organization.
az devops user remove --user contoso@contoso.com --org https://dev.azure.com/contoso/ --yes
::: moniker-end
[!INCLUDE note-cli-not-supported]
To remove users from a project, remove them from the Teams groups they belong to or the Contributors group for the project. For more information, see Add users to a project or specific team. You can remove a user from the Members page of a team group or security group.
