Skip to main content
Self-hosted build agents let you run Azure DevOps pipelines on machines you control. Unlike Microsoft-hosted agents, you can install custom software, configure security policies, and optimize hardware for your specific workloads. By managing your own infrastructure, you can reduce costs, improve performance, and ensure every tool or SDK you need is available on the agent.

​
1. Create a Personal Access Token (PAT)

Before registering an agent, you must generate a PAT in Azure DevOps.
  1. Click the Settings (gear) icon near your avatar, then select Personal access tokens.
  2. Choose New Token.
  3. Enter a descriptive Name and set an Expiration date.
  4. Under Scopes, grant only the minimum permissions:
    • Agent Pools: read & manage
    • Build: read & execute
Always restrict your PAT to the least-privilege scopes required. Avoid selecting Full Access unless absolutely necessary.
The image shows a user interface for creating a new personal access token in Azure DevOps, with options to set the token's name, organization, expiration, and access scopes. The left panel displays user settings, including personal access tokens and SSH public keys.
  1. Click Create, then immediately Copy the token—this is the only time it will be displayed.
The image shows a screenshot of the Azure DevOps user settings page, specifically the "Personal Access Tokens" section, with a success message indicating a new token has been created.

​
2. Add a Self-Hosted Agent Pool

Now create a dedicated pool to organize your self-hosted agents.
  1. In your project, open Project settings (bottom-left).
  2. Select Agent pools.
  3. Click Add pool, choose Self-hosted, and fill in:
    • Pool name: KodeKloudCustomer
    • Optionally, check Grant access permission to all pipelines
The image shows a web interface for Azure DevOps, specifically the "Agent pools" settings page, with a dialog open for adding a new self-hosted agent pool named "KodeKloudCus."
  1. Click Create.

​
3. Download, Configure & Run the Agent

Select the agent package for your OS and follow these steps:

​
Windows PowerShell

​
Linux Bash

During configuration, you will be prompted for:
  • Server URL: e.g., https://dev.azure.com/yourOrg/
  • Authentication type: press Enter for PAT
  • Personal access token: paste your PAT
  • Agent pool: press Enter for KodeKloudCustomer
  • Agent name: accept the default or enter a custom name
  • Work folder: default is _work
  • Run as service: choose Yes/No

​
Sample Interactive Session on Windows

If you choose to run the agent as a service (Y), it will automatically start on machine reboot.

​
Starting the Agent

The image shows an Azure DevOps interface displaying the "Agent pools" settings for "KodeKloudCustomer," with one agent named "KodeKloudAgent1" listed as online and idle.
Your agent should now appear Online and Idle in the KodeKloudCustomer pool, ready to process pipeline jobs.

​
4. Troubleshooting & Best Practices

Consider using containerized agents if you need rapid scaling and tighter isolation between builds.
Regularly update your agent binaries, monitor performance metrics, and audit access to maintain a secure and reliable build environment.

​
References

Watch Video