Disable access to Azure Devops for already uninstalled extension

Question

Last week we installed an extension to backup our Azure DevOps organisation (Backrightup Backup). After a few tests we decided to cancel this extension and we uninstalled the extension.

Still, everyday a backup is made in one of our storage accounts.

How do I kill all access to our Azure Devops environment so that backups are no longer created? How do I even manage the permissions of extensions?

Answer 1

The Backrightup extension permission is based on the your account which is the project collection administrator role.

After investigation, you need to remove the account from DevOps organization(if you're owner, change owner to another account), and then add your account back to the organization(change owner back if needed).

In addition, please also remove below permissions:

1. Go to https://aex.dev.azure.com/me with your account, make sure the AAD domain is correct under your account. -> Manage Authorizations -> Revoke the app Backrightup.com.

2. Delete the enterprise app Backrightup on azure portal.

3. Uninstall Backrightup extension on DevOps organization.

4. Go to project, remove webhook to BackrightUp.

Answer 2

Maybe I found it. In Microsoft Entra ID, I went to 'Enterprise applications' and sorted the applications by date.

The first entry was of the Azure DevOps Extension. I deleted this entry (by selecting it, going to properties and delete).

I hope tomorrow no new backups are created. I will update this answer when I have results.

Edited: Nope, although i think it is good i got rid of this entry, it was not enough.

But today I found another entry in my DevOps environment:

I will delete this and post any results.

Frustrating. This row cannot be deleted. Clicking the red button does nothing.