To which security group should you add the project manager?

You have a private project in Azure DevOps.

You need to ensure that a project manager can create custom work item queries to report on the project’s progress. The solution must use the principle of least privilege.

To which security group should you add the project manager?
A . Project Collection Administrators
B. Reader
C. Project Administrators
D. Contributor

Answer: D

Explanation:

Contributors have permissions to contribute fully to the project code base and work item tracking. The main permissions they don’t have or those that manage or administer resources.

Reference:

https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions

https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions-access-work-tracking?view=azure-devops#queries-and-semantic-search