Enumerating Work Items as part of a release pipeline

Hello,

I'm trying to develop a script that will execute as part of a release pipeline. The script should enumerate work items returned by a stored query and perform release activites per each work item using some custom fields included in the work item itself.

Looking at the API documentation it seems that I will need to generate a personal access token to give my script access to the Azure DevOps environment to do this activity but my question is - why? If I'm running the python as a release task, technically I've already got "access" by the very nature of the release pipeline itself running as an agent task? Do I really need to generate another token or can I just use the context of the agent? And if so, how?

L’issue ne nomme aucun fichier ni test du dépôt ; commencez par la documentation de l’API pour les personal access tokens et le release-task agent context décrit dans la question. Documentez si un pipeline de release peut énumérer les éléments de travail issus de requêtes enregistrées et accéder à leurs champs personnalisés sans token distinct, et expliquez le mode d’authentification pris en charge.