It is amazing how quickly VSTS changes and evolves – of course you need to keep up with it as well 
This is todays discovery – the new Service Endpoint’s ACL management UI. In the past Service Endpoints were shown pretty much just as a key-value field with an URL, in reality they have two security groups behind the scenes:
- Endpoint Administrators
- Endpoint Creators
You knew that (didn’t you?), but managing the ACL per-endpoint wasn’t as straightforward as it is today.
The Roles tab in each Endpoint now has a much clearer view of the users’ assignments:
And adding an user is a much better experience now – with an immediate explanation of the role and the associated permissions:
What really strikes me here is the possibility of having the Access inheritance shown immediately – this is a very welcome change for me