The token doesn't have the required permissions (Code: Read & Write)

Get help SonarCloud
#1

Attempting to import our Azure DevOps organisation to SonarCloud, i click the + > Analyse New Project > Import another organisation.

I’ve entered the AzureDevOps organisation name ‘glasswall’
I’ve created my PAT and entered the token, but upon doing so i get 'The token doesn’t have the required permissions (Code: Read & Write).

After checking my PAT, i can confirm it has those permissions, but it still isn’t being accepted. So right now, i’m unable to import our Azure DevOps projects.

Any advice on how to solve this problem please?

#2

After some further digging, it appears that if ‘Enable Azure Active Directory Conditional Access Policy Validation;’ is on, it causes an issue with authenticating with SonarCloud - is there a work around for this?

#3

Hi @ChrisHolman and welcome to the community !

I’m afraid there are no workaround possible currently for this.

Mickaël

#4

Thanks for the reply Mickaël!

So if this option is switched on, we’re unable to use SonarCloud?

#5

This is true, yes.

#8

What are the IP addresses associated to SonarCloud? We can add them to the CAP so the communication can succeed.

#9

Hi @ChrisHolman

We don’t have fixed IPs, you’ll have to rely on the domain itself.

Mickaël

#10

Thanks! I assume whitelisting sonarcloud.io will be sufficient?

#11

It should be, but as far as i remember this is not possible to do it like that with the CAP ?

#12

We whitelisted the IP associated with sonarloud.io (18.194.60.35) but still get the 'The token doesn’t have the required permissions (Code:Read & Write).