[Feature Request]

[whsh-ca]

Is your feature request related to a problem? Please describe.

We want to use the DevOps CLI to turn off inheritance at the "All branches" level for a newly created repo then remove built-in/inherited groups such as Build Administrators and Project Collection Administrators as well as configure custom ones e.g. My_Project_Group using

az devops security permission update --allow-bit $custom_permission_bits --id 2e9eb7ed-3c0a-47d4-87c1-0ffdd275fd87 --subject "$myGroupDescriptor" --token "$branchToken" --output table

There is a request #848 quite a few years ago and the solution offered then was to use the REST API. I'm not sure whether it works for our case because we want to turn off inheritance and configure custom access at the "All Branches" level so that any branch created afterwards will inherit the custom configuration instead of the organizational wide one. However, "token" is specific to given branch like main as far as I know.

As it has been several years, I'm wondering whether it's implemented already although I cannot find a CLI command that accomplish this.

Describe the solution you'd like

Add the feature so that permission inheritance can be disabled the same as the feature available on the DevOps GUI.

Additional context