Microsoft is retiring Global Personal Access Tokens in Azure DevOps, closing a long‑standing security loophole. Global PATs gave users cross‑organization access with a single key — convenient, but risky. The move signals a tighter security posture for development teams managing sprawling DevOps estates.