Your company has a private project in Azure DevOps. You have to ensure that a project manager can create custom work item queries that can be used to report on the project’s progress. The solution must use the principle of least privilege. To which security group must you add the project manager to?

Answer options:

A.Project Collection Administrators
B.Readers
C.Contributors
D.Project Administrators

Answer – C 
To provide the privilege to create custom work item queries, you can add the user as part of the "Contributors" group. This would allow you to create or edit a shared query. 

For more information on query permissions, you can refer to the below link- 

https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions?view=azure-devops&tabs=preview-page#project-level-groups