title: How to prevent pushing directly to Master branch in AzureDevOps
body: <p>User from a group like Build Administrator can access the project from Azure Devops. I need to control the user in that group to upload the file directly to the master branch.  The user can manually upload files to all branches except Master.  Because my master branch is based on Pull request.  How can I implement this?  Does it need any permission?</p>