Kicking off pipeline in another project issues - are exact permissions required documented or known?

[royalsfankc]

I am trying to kick off a pipeline from one project to another. It seems like I am hitting permission issues. I feel like I have tried every setting I can thing of in the config. I have tried the guid for the project name vs the project name string etc. Are there any particular build/pipeline permissions I need to explicitly check?

steps:
- task: TriggerBuild@4
inputs:
definitionIsInCurrentTeamProject: false
teamProject: 'ourGUID' // I have tried the name by string too
buildDefinition: 'Tests - PR Checks' // I have tried the build definition by number as well
tfsServer: 'https://ourDomainName.visualstudio.com/'
templateParameters: 'runSystemTests: true, runAPITests: false'
queueBuildForUserThatTriggeredBuild: false
ignoreSslCertificateErrors: false
useSameSourceVersion: false
useCustomSourceVersion: false
useSameBranch: false
waitForQueuedBuildsToFinish: true
waitForQueuedBuildsToFinishRefreshTime: '5'
storeInEnvironmentVariable: false
authenticationMethod: 'OAuth Token'
password: '$(System.AccessToken)'
enableBuildInQueueCondition: false
dependentOnSuccessfulBuildCondition: false
dependentOnFailedBuildCondition: false
checkbuildsoncurrentbranch: false
failTaskIfConditionsAreNotFulfilled: false

WIth this config we see errors like this:

Using Custom Team Project
Team Project: ourGUID
Using Custom Collection Url
Server URL: https://ourDomainName.visualstudio.com/
Using following Authentication Method: OAuth Token
Using OAuth Access Token
Provided team project was guid.
Will trigger build with following template parameters: runSystemTests: true, runAPITests: false
Error during request (1/5)
Error message: Error: VS800075: The project with id 'vstfs:///Classification/TeamProject/ourGUID' does not exist, or you do not have permission to access it.
Will wait 1 seconds before retrying request...
Error during request (2/5)

When using a string vs a guid, I get this error:

Using following Authentication Method: OAuth Token
Using OAuth Access Token
Provided team project was no guid, trying to resolve ID via API...
##[error]Could not find any Team Project with name ourProjectName
Finishing: TriggerBuild

[huserben]

Hi @royalsfankc

I would in general use the project name over the GUID (I think I added the option with the GUID just in case someone has duplicate project names, but not entirely sure anymore).

Then I would start out with trying to use the Personal Access Token (PAT) to trigger it, especially because in your config you want to trigger a pipeline that is in a different team project. Once we can make it work, we could go back to the OAuth method, but for finding the issue a PAT is easier.

Few questions:

• Is the pipeline in another team project on the same organization or a completely different organization? Keep in mind that the PAT you supply must have the rights for the project where the pipeline you want to trigger is hosted
• Is the URL correct? I haven't seen a "*.visualstudio.com" in a long while, so I caught my attention.