title: Azure DevOps: Deny viewing "Task Groups" to Readers/Project Valid Users
body: <p><strong>I just realized any user can see <code>Task Groups</code>.</strong> And also inside Task Groups.<br>
  Even though I disabled "view build and release pipelines".</p>
  
  <p>And even though in the Security Settings, <code>Readers</code> is not even listed in the permissions.</p>
  
  <p><a href="https://i.stack.imgur.com/KAlH1.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/KAlH1.png" alt="enter image description here"></a></p>
  
  <p>Any advice how I can prevent this?
  I tried adding Readers with a deny all setting... but obviously there isn't even a permission for "viewing". So your best advice is to not do any secret magic in your task groups? ;-)</p>