Project Collection Administrators.

Why This Matters

Membership in the "Project Collection Administrators" group grants elevated privileges across all projects in the Azure DevOps organization. Over-privileged users can modify project settings, delete repositories, or alter build pipelines, leading to potential data loss, service disruption, or unauthorized configuration changes. Regular review ensures only authorized personnel retain this high-level administrative access.

What Aether365 Checks

This check verifies the current membership list of the "Project Collection Administrators" group in your Azure DevOps organization. It appears in the Aether365 dashboard under the microsoft-365 checks category.