TF401289权限问题求助：组织所有者/项目管理员无法创建工作项标签

Hey Andy, sorry you're stuck with this frustrating permission error even as an org owner and project admin. Let’s work through these actionable steps to fix it:

• Verify project-level "Create tag definition" permissions
  Even if you’ve set team-level permissions, project-level settings might be overriding them. Go to your project’s Settings > Permissions, select the relevant project admin group (like Project Administrators), then find the Create tag definition permission under the "Work Items" category. Make sure it’s set to Allow.

• Check for conflicting Deny permissions
  Deny permissions take precedence over Allow in Azure DevOps. Double-check all groups you’re part of (including inherited ones) to ensure none have Create tag definition set to Deny. A single Deny in any group can block your access even if other groups allow it.

• Refresh permission cache & re-authenticate
  Sometimes Azure DevOps doesn’t apply permission changes immediately. Try these quick fixes:

  • Log out of your Azure DevOps account completely, then log back in.
  • Clear your browser’s cache and cookies, or test in an incognito window.
  • If using the CLI, run az devops login to re-authenticate your session.

• Test with a simple tag name
  While the error mentions permissions, odd characters or overly long tag names can sometimes trigger unexpected issues. Try creating a basic tag like Test-Tag-123 to rule out naming conflicts.

• Confirm organization-level tag permissions
  As an org owner, you should have full access here, but it’s worth verifying: Go to Organization Settings > Permissions > Project Collection Administrators, and ensure Create tag definition is set to Allow. This ensures no collection-level restrictions are blocking you.

If none of these steps work, try creating a new test project and attempting to add a tag there—this can help isolate if the issue is specific to your existing projects. If the problem persists, reaching out to Azure DevOps support with your org/project details might be necessary.

内容的提问来源于stack exchange，提问作者Andi