---
title: "Personal Access Token authentication in Microsoft Azure DevOps (formerly VSTS)"
canonical: "https://support.appfire.com/space/TSH/1800275671/Personal%20Access%20Token%20authentication%20in%20Microsoft%20Azure%20DevOps%20(formerly%20VSTS)"
format: markdown
---
### In order to use Personal Access Token authentication, please:

1. **Generate** your Personal Access Token –  please [follow the instructions from Microsoft documentation](https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/use-personal-access-tokens-to-authenticate#create-personal-access-tokens-to-authenticate-access).
2. **Copy and paste** the generated Token to 'Personal Access Token' field in TFS Connection section in Synchronizer.

Please note that tokens are created for particular user accounts.  
You may want to create a **dedicated user account** to be used by Synchronizer to perform the synchronizations.  
This account should be granted [proper permissions](https://appfire.atlassian.net/wiki/spaces/TSH/pages/1800209893).

**Graph -** Read, group, scope, and add

- [x] Read

- [ ] Read & manage

**Project and Team - **Create, read, update, and delete

- [x] Read

- [ ] Read & write

- [ ] Read, write, & manage

**Work Items - **Work items, queries, backlogs, plans, and metadata

- [x] Read

- [x] Read & write

- [ ] Read, write, & manage

To learn more about Azure authentication, please see [Microsoft documentation](https://docs.microsoft.com/en-us/azure/devops/repos/git/auth-overview?toc=%2Fazure%2Fdevops%2Forganizations%2Ftoc.json&bc=%2Fazure%2Fdevops%2Forganizations%2Fbreadcrumb%2Ftoc.json&view=azure-devops).