I need to create a new team project collection in TFS 2015 Update 3 and I'm following this guideline.
Visual Studio Team Foundation Background Job Agent service account does not have the privilege to create databases on the DB server, and I intend to keep like this.
For this I consider:
DBA create empty database named appropriately but assign no permissions for the Team Foundation Background service account
Run “Use this existing database” in the Create Team Project Collection wizard.
I assume this will create necessary schemas/metadata in DB and allow TFSExecRole to the Team Foundation Background Job Agent service account on this new database.
Question: Is this correct?
Based on your description, you mentioned the Team Foundation Background service account should be the account which you specified to connect to the SQL Server during the TFS configuration.
You will find that the owner of the collection DB should be the user who created the collection (Right click the collection DB -> Properties -> General).
Actually, all the TFS Administrators (Add administrators to TFS) are the owner of the collection DBs (Security -> Logins -> Right click on any admin users -> properties -> User Mapping ).
So, whatever you need to use the TFS administrators account to create the NEW Collection. Just exactly following the guides: Create a team project collection
Related
I need to create a new team project collection in TFS 2015 Update 3 and I am following Create a Team Project Collection
This question is related to SharePoint Site collection only (created during TFS collection creation)
TFS service account is not presently member of the Farm Administrators group on SharePoint 2010 but intend on allowing temporarily during creation new TFS 2015 team project collection in TFS (which will create new SharePoint site collection as well) and then remove after collection creation.
Will this create proper permissions to the SharePoint site collection?
I have two users say user Ad and user Us, Ad has admin rights and is the account used to install and configure TFS 2015, user Us is an admin which has all permissions needed for an administrator.
Now when I tried to create a new project from Visual Studio 2015 the get the below error:
Error
The Project Creation Wizard encountered an error while creating reports to the SQL Server Reporting Services on
Interestingly, my Ad account does not have SYSDBA permission on the databases when i get the error. But if i provide the SYSDBA permission to the Ad account the project creation utility works.
I want to know how is this possible? and is there a way to create a new project in TFS 2015 without having the SYSDBA permission?
Help appriciated!!!
If you just create a new project, usually you only need to be the memeber of the Project Collection Administrators Group and have the Create new projects permission set to Allow.
However, if you have SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment or a SharePoint Web application been configured for your deployment, you also need to become a member of Team Foundation Content Managers group and get Full Control permissions on the server that hosts SharePoint Products.
Has SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment?
If so, ask your administrator to add you as a member of the Team
Foundation Content Managers group on the server that hosts SQL Server
Reporting Services. Without these permissions, you’ll be unable to
create a team project.
More detail info please refer the link from MSDN: Create a team project
Permissions for TFS Team project creation:
1. Add the user to TFS Admin console users or to Project collection Admin group
2. If sharepoint is available, Add user to sharepoint Farm admin and also site collection administrators
3. If Reporting is configured, Give user Team Foundation Content Manager role.
Still if team project creation fails then Depending on the error check if user is added to TfsReports Folder security and then in to specific collection level folder security.
4. If error is related to Datasources then check if user is available at both reportDS and OlapreportDS security.
If you can give the exact error message base on that recommendations can be made. The above information is the basic requirement.
I have created a TFS project collection and a Team Project, I also have a Team Project \ Group undyer which I've added all team project users. TFS is controlled by Domain B and users will try to connect to TFS from Domain A. all TFS users have both Domain A and Domain B accounts.
When I try to connect to TFS from a machine in Domain A I get prompted for Domain B credentials the credentials popup pos twice or three times before I get an error message saying "no account information is provided..."
any idea on what TFS (Team Project or Team collection) Group shoud my users be added to?
You need to add your own new group to the TeamProject group that is called "Project Collection Valid Users", otherwise they are not allowed to acces the TFS.
Suppose I have a team foundation server http://tfs:8080 and a collection named Collection1 and a project named Project1. How would I go about giving user User1 all privileges on the project? (Either by adding him to the Team Project Administrators group OR by granting individual privileges as you would in the GUI)
This is what i would recommend, download the TFS ADMIN tool http://tfsadmin.codeplex.com/, this is a community tool that for TFS Administrators, The TFS Administration Tool allows Team Foundation Server administrators to manage user permissions on all three platforms utilized by Team Foundation Server: Team Foundation Server, SharePoint, and SQL Server Reporting Services. The tool also allows administrators to easily copy user permissions among team projects and to easily identify any missing permissions on any of the three platforms.
However, you don't need the admin tool to assign permissions. You can right click on the team project and click on group membership, double click on the group that you would like to add the user to and add their windows login to the group. You can read more about this here, http://msdn.microsoft.com/en-us/library/ms252477.aspx
HTH
Cheers, Tarun
I have installed Visual Studio Team Foundation Server 2010 on Windows 7 Professional edition.
How can I manage (add) new users which can use the TFS 2010?
I had the same challenge. It isn't obvious how this can be done without Visual Studio but here we go... On your TFS 2010 server:
Go to Team Foundation Server
Administration Console
Navigate to your Team Project Collection
Select Group Membership from the General tab
Open Project Collection Valid Users. It should include your Team Projects's groups as
members.
Select suitable Team Project group and add your user into that group.
Since you don't have a server version of windows, you can't have a domain, so you can't add domain users to your project.
You should either install a server (which most people might recommend) or you can save your time and effort and just simply create local users on your TFS server (which can have any version of windows). This method will work just the same as installing a windows server. To do that just go to this location:
"Computer Management" -> "Local Users and Groups" -> Users
Add any users you want and in order to prevent windows from showing them in the welcome screen, double click on each one of them and remove their member of data (which is set to Users by default)
Then follow Kyberias' instructions.
Connect to a team project in VS2010.
In the Team Explorer menu expand your team project.
Right click Team Members and select Add Team Member.
From here you can add members and assign them permissions based on what they should be allowed to do on the project.
I hope this is what you are looking for.
The problem here is that there are no TFS users per se. TFS authenticates users against windows which runs it. Once you have some windows users, then you must configure permissions as mentioned by Kyberias.