Extension permissions
PR Pulse requests vso.code to read repositories and pull requests. Treefold requests vso.work to read work items and queries. Tagfold requests vso.work_write to rename, merge, and delete tags on work items. Actions also depend on your own Azure DevOps permissions.