How can I remove members from TFS groups programmatically in c#? - tfs

Question

I have access to TFS users. I can get them into list but need to remove some of them from all the groups in our TFS. I've done so many researchers so far. Simply, I need to remove user from TFS groups.
I am open to any suggestions. Even for the crazy ones!
I've tried programmatical stuff. Don't have any clue.
After so many tries, finally got somewhere. My final code:
bool isError = false;
TeamFoundationIdentity memberId = ims.ReadIdentity(IdentitySearchFactor.DisplayName, id.DisplayName, MembershipQuery.Expanded, ReadIdentityOptions.None);
IIdentityManagementService2 ims2 = tcs.GetService<IIdentityManagementService2>();
string group = "Confidential Group;
TeamFoundationIdentity groupId = ims2.ReadIdentity(group);
if (groupId == null)
{
isError = true;
}
if (memberId == null)
{
isError = true;
}
if (!isError)
{
ims2.RemoveMemberFromApplicationGroup(groupId.Descriptor, memberId.Descriptor);
}
The error:
'TF50621: The Team Foundation group that you wish to manage is not owned by service host TEAM FOUNDATION, it is owned by . Please target your request at the correct host.'**

Answer 1

Check out the Azure Boards Team Tools.
It does most of what you need already:
message = string.Empty;
bool ret = true;
TeamFoundationTeam t = this.teamService.ReadTeam(this.projectInfo.Uri, team, null);
TeamFoundationIdentity i = this.identityManagementService.ReadIdentity(IdentitySearchFactor.AccountName, user, MembershipQuery.Direct, ReadIdentityOptions.None);
if (t == null)
{
message = "Team [" + team + "] not found";
ret = false;
}
if (i == null)
{
message = "User [" + user + "] not found";
ret = false;
}
if (ret)
{
this.identityManagementService.RemoveMemberFromApplicationGroup( t.Identity.Descriptor, i.Descriptor);
message = "User removed ";
}
return ret;
This function removes a user from a Team. A Team is a special kind of group, the function is easy to adapt to retrieve a Group to delete the user from though:
Replace
TeamFoundationTeam t = this.teamService.ReadTeam(this.projectInfo.Uri, team, null);
With:
string group = ...
var t = this.identityManagementService.ReadIdentity(group);
Or use the REST API :
DELETE https://vsaex.dev.azure.com/{organization}/_apis/GroupEntitlements/{groupId}/members/{memberId}?api-version=7.1-preview.1