We're trying to configure Access Levels for an on-premise TFS 2015 server as explained here.
However the "Access levels" tab in Control Panel is not visible to our TFS Administrator. He has administration right for both the Team Collection and Team Project. We're not running TFS Express, so this should be available to us.
This leaves us wondering, what are the requirements to be able to configure Access levels in TFS 2015? Is there something we are missing?
To see the Access levels tab, you need to add the user to Team Foundation Administrators group
If you don't see the Access levels tab, you aren't a TFS administrator
and don't have permission. Here's how to get permissions (Add
administrators to TFS).
You can quickly grant these permissions to administrators by adding them to the Team Foundation Administrators group from TFS administration console in Team Foundation Server (TFS).
Follow the steps mentioned in this link : Add administrators to TFS:
On the application-tier server, add the user to the local
Administrators group.
In the TFS administration console and add the user to the set of
users who can run the administration console.
Make sure you have selected the Add user to Team Foundation Administrators group item.
Related
I have two users say user Ad and user Us, Ad has admin rights and is the account used to install and configure TFS 2015, user Us is an admin which has all permissions needed for an administrator.
Now when I tried to create a new project from Visual Studio 2015 the get the below error:
Error
The Project Creation Wizard encountered an error while creating reports to the SQL Server Reporting Services on
Interestingly, my Ad account does not have SYSDBA permission on the databases when i get the error. But if i provide the SYSDBA permission to the Ad account the project creation utility works.
I want to know how is this possible? and is there a way to create a new project in TFS 2015 without having the SYSDBA permission?
Help appriciated!!!
If you just create a new project, usually you only need to be the memeber of the Project Collection Administrators Group and have the Create new projects permission set to Allow.
However, if you have SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment or a SharePoint Web application been configured for your deployment, you also need to become a member of Team Foundation Content Managers group and get Full Control permissions on the server that hosts SharePoint Products.
Has SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment?
If so, ask your administrator to add you as a member of the Team
Foundation Content Managers group on the server that hosts SQL Server
Reporting Services. Without these permissions, you’ll be unable to
create a team project.
More detail info please refer the link from MSDN: Create a team project
Permissions for TFS Team project creation:
1. Add the user to TFS Admin console users or to Project collection Admin group
2. If sharepoint is available, Add user to sharepoint Farm admin and also site collection administrators
3. If Reporting is configured, Give user Team Foundation Content Manager role.
Still if team project creation fails then Depending on the error check if user is added to TfsReports Folder security and then in to specific collection level folder security.
4. If error is related to Datasources then check if user is available at both reportDS and OlapreportDS security.
If you can give the exact error message base on that recommendations can be made. The above information is the basic requirement.
I just installed tfs 2015. I made all steps this -->
http://bendayblog.blob.core.windows.net/wp-public/2015/08/benday-tfs2015-install-guide-v1.0.pdf
Now we have 6 members group. What can we do? How to add new user to tfs 2015 ??
In addition, I look that --> https://msdn.microsoft.com/en-us/library/bb558971.aspx
This site says that you add windows users. What does it mean Windows user? How do I this??
As you can see, you can add windows user or windows group in TFS. TFS use the authentication with windows user/domain user to access the server. TFS can't create users directly. There are no TFS users. For TFS group you can add some users in a group to meet required permissions.
Windows user just mean the user account to access windows. Suggest to use the domain user in TFS. Windows user group is a collection of user accounts that all have the same security rights. User groups are also sometimes referred to as security groups.
A similar question How to add new users to TFS 2010 for you reference.
I'm updating the users that have access to the TFS admin console, and it appears to only let you add individual user accounts. Is there any way for me to choose Active Directory groups instead of users?
In TFS 2012 and TFS 2013 in the settings for TFS groups on the security page when you click on "Add..." in the "Members" tab, you get the options to either select a "TFS group" or a "Windows User or group".
If you don't see these two options, it can be that TFS 2010 has a different security mechanism that I don't know of or your Sharepoint Server hasn't been added to the AD yet.
I have two different project in my TFS. They are in the same collection. Can I setup Team Foundation Server for users only see and work on one project which I assign to them? I want them to work only one project without being able to see the other one.
Team Foundation Server Permissions - MSDN
Project-Level Permissions
Project-level permissions are specific to a single project's users and
groups. You can set these permissions in Team Foundation Server by
right-clicking the project in Team Explorer and clicking Security.
Additionally, you can set these permissions by using the TFSSecurity
command-line utility.
Suppose I have a team foundation server http://tfs:8080 and a collection named Collection1 and a project named Project1. How would I go about giving user User1 all privileges on the project? (Either by adding him to the Team Project Administrators group OR by granting individual privileges as you would in the GUI)
This is what i would recommend, download the TFS ADMIN tool http://tfsadmin.codeplex.com/, this is a community tool that for TFS Administrators, The TFS Administration Tool allows Team Foundation Server administrators to manage user permissions on all three platforms utilized by Team Foundation Server: Team Foundation Server, SharePoint, and SQL Server Reporting Services. The tool also allows administrators to easily copy user permissions among team projects and to easily identify any missing permissions on any of the three platforms.
However, you don't need the admin tool to assign permissions. You can right click on the team project and click on group membership, double click on the group that you would like to add the user to and add their windows login to the group. You can read more about this here, http://msdn.microsoft.com/en-us/library/ms252477.aspx
HTH
Cheers, Tarun