diff --git a/tools/releaseBuild/azureDevOps/releasePipeline.yml b/tools/releaseBuild/azureDevOps/releasePipeline.yml
index 72123ba7d8..b893a8f5cf 100644
--- a/tools/releaseBuild/azureDevOps/releasePipeline.yml
+++ b/tools/releaseBuild/azureDevOps/releasePipeline.yml
@@ -41,6 +41,7 @@ variables:
   - name: BUILDSECMON_OPT_IN
     value: true
   - group: ReleasePipelineSecrets
+  - group: PipelineExecutionPats
 
 stages:
 - stage: MSIXBundle
@@ -211,7 +212,7 @@ stages:
         Get-ChildItem -Path $(Build.SourcesDirectory)
         Import-Module $(Build.SourcesDirectory)\ReleaseTools\AzDO -Force
         Set-AzDoProjectInfo -ProjectOwner PowerShell-Rel -ProjectName Release-Automation
-        Set-AzDoAuthToken -Token $(RELEASEAUTOMATIONPAT)
+        Set-AzDoAuthToken -Token $(powershellRelExecutionPat)
         $packageBuildID = $(resources.pipeline.releasePipeline.runID)
         $metadata = Get-Content -Raw -Path '$(Pipeline.Workspace)/releasePipeline/metadata/release.json' | ConvertFrom-Json
         $buildInvocationInfo = Start-AzDOBuild -BuildDefinitionId 10 -BuildArguments @{ POWERSHELL_PACKAGE_BUILD_BUILDID = $packageBuildID } -Tag $metadata.ReleaseVersion, 'InProgress' -PassThru
@@ -254,7 +255,7 @@ stages:
     - pwsh: |
         Import-Module $(Build.SourcesDirectory)\ReleaseTools\AzDO -Force
         Set-AzDoProjectInfo -ProjectOwner PowerShell-Rel -ProjectName Release-Automation
-        Set-AzDoAuthToken -Token $(RELEASEAUTOMATIONPAT)
+        Set-AzDoAuthToken -Token $(powershellRelExecutionPat)
         $metadata = Get-Content -Raw -Path '$(Pipeline.Workspace)/releasePipeline/metadata/release.json' | ConvertFrom-Json
         $azDOBuild = Get-AzDOBuild -buildDefinitionId 10 -MaximumResult 100  | Where-Object { $_.tags -in $metadata.ReleaseVersion }
         $azDoBuild | Remove-AzDOBuildTag -tag 'InProgress' -Pass | Add-AzDOBuildTag -tag 'SignedOff'
@@ -435,7 +436,7 @@ stages:
     - pwsh: |
         Import-Module $(Build.SourcesDirectory)\ReleaseTools\AzDO -Force
         Set-AzDoProjectInfo -ProjectOwner PowerShell-Rel -ProjectName PowerShell
-        Set-AzDoAuthToken -Token $(RELEASEAUTOMATIONPAT)
+        Set-AzDoAuthToken -Token $(powershellRelExecutionPat)
         $metadata = Get-Content -Raw -Path '$(Pipeline.Workspace)/releasePipeline/metadata/release.json' | ConvertFrom-Json
         $buildInvocationInfo = Start-AzDOBuild -BuildDefinitionId 49 -Tag $metadata.ReleaseVersion, 'InProgress' -PassThru
         Write-Verbose -Verbose "Kicked off snap build: $($buildInvocationInfo.WebUrl)"
@@ -476,7 +477,7 @@ stages:
     - pwsh: |
         Import-Module $(Build.SourcesDirectory)\ReleaseTools\AzDO -Force
         Set-AzDoProjectInfo -ProjectOwner PowerShell-Rel -ProjectName PowerShell
-        Set-AzDoAuthToken -Token $(RELEASEAUTOMATIONPAT)
+        Set-AzDoAuthToken -Token $(powershellRelExecutionPat)
         $metadata = Get-Content -Raw -Path '$(Pipeline.Workspace)/releasePipeline/metadata/release.json' | ConvertFrom-Json
         $azDOBuild = Get-AzDOBuild -buildDefinitionId 49 -MaximumResult 100  | Where-Object { $_.tags -in $metadata.ReleaseVersion }
         $azDoBuild | Remove-AzDOBuildTag -tag 'InProgress' -Pass | Add-AzDOBuildTag -tag 'SignedOff'
@@ -580,7 +581,7 @@ stages:
     - pwsh: |
         Import-Module $(Build.SourcesDirectory)\ReleaseTools\AzDO -Force
         Set-AzDoProjectInfo -ProjectOwner mscodehub -ProjectName PowerShellCore
-        Set-AzDoAuthToken -Token $(MSCODEHUBPAT)
+        Set-AzDoAuthToken -Token $(mscodehubBuildExecutionPat)
         $metadata = Get-Content -Raw -Path '$(Pipeline.Workspace)/releasePipeline/metadata/release.json' | ConvertFrom-Json
         $releaseVersion = $metadata.ReleaseVersion -replace '^v',''
         $semanticVersion = [System.Management.Automation.SemanticVersion]$releaseVersion