# Configure Azure DevOps

## Creating a CI/CD Service Account User in DuploCloud <a href="#create-cicd-service-account-user-in-duplocloud" id="create-cicd-service-account-user-in-duplocloud"></a>

1. In the DuploCloud portal, navigate to **Administrator** -> **Users**. The **Users** page displays.
2. Click **Add**.
3. In the **Username** field, enter a non-email address username, such as **cicd**. The username cannot be a valid email address, as DuploCloud designates it as a service account.
4. From the **Roles** list box, select **Admin** for the fastest setup. If you select **User**, you must [give Tenant access to that user](/docs/automation-platform/access-control/user-access-and-permissions/tenant-access.md).
5. Click **Submit**. Your service account is set up and can be viewed or modified from the **Users** page.

## Create a Permanent Token for the Service Account User <a href="#create-permanent-token-for-service-account-user" id="create-permanent-token-for-service-account-user"></a>

Create a [permanent token](/docs/automation-platform/access-control/api-and-session-management/api-tokens.md#permanent-api-tokens) for the service account [that you created](#create-cicd-service-account-user-in-duplocloud), using a token name that describes the CI/CD platform, such as `azure-devops`.

## Save the Token to Azure DevOps Pipelines Variable Group <a href="#save-token-to-azure-devops-pipelines-variable-group" id="save-token-to-azure-devops-pipelines-variable-group"></a>

In the Azure DevOps Portal, save the token that you created in DuploCloud to the Azure DevOps Pipelines Variable Group.

<figure><img src="/files/irenMXsoeDMOTo71u21o" alt="Azure DevOps Pipelines Library section with a Variable Group named duplocloud-secrets selected for editing. DUPLO_TOKEN is defined but the value is secret and hidden. DUPLO_HOST is the URL for the DuploCloud portal including the https but not any path suffix. ECR_BASE is defined with the FQDN for an ECR repo for account 12345 but excluding any repo-specific path."><figcaption><p>Creating the <code>duplocloud-secrets</code> Azure Pipelines Variable Group in the Azure DevOps Portal</p></figcaption></figure>

1. In an Azure DevOps project, navigate to **Pipelines** -> **Library**.
2. Create a new variable group named `duplocloud-secrets`.
3. Add a `DUPLO_TOKEN` variable; select **Lock** (next to the Value field), and paste in the permanent token as the **Value**.
4. Add a `DUPLO_HOST` variable. The Value is your DuploCloud portal URL, as in the example above.
5. Add a `ECR_BASE` variable based on the domain name of your ECR registry, as in the example above.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/introduction-to-ci-cd/azure-pipelines/configure-azure-devops.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.