TFS access rights for revoking some rights to project collection admins - tfs

I am using Visual Studio Team Services (VSTS).
I have to create some Project Collection Administrators only for administrative purpose.
At the same time, there will be few projects where all the administrators will not have all rights to those projects.
Since rights are inherited, rights cannot be revoked from those administrators and given to some normal users only, few of those users may be project collection administrators also.
Is it possible to achieve this?
Thanks

No, it is impossible, because with project collection administrator’s permission, he can reset the permission what he needs and add himself to any group of the collection or team project.
So, if other administrator grant deny permission for him, he still can reset these permissions to allow.
To conclude, you can’t add them to project collection administrator group, just grant necessary permission for them.

Related

How to restore permission for editing wiki on TFS online?

I am an admin on a TFS online project, and I have created a wiki and written some pages in it. However, today I cannot access it to edit these pages nor add sub-pages.
The Security button in Wiki page also has been disappeared. How can I restore permission for my account? So I can edit Wiki pages again.
Ask another admin to set the Wiki security Contribute permission to Allow for your account.
If no other admins in your organization, then you can follow below steps to do that:
Add a team member to Project Collection Administrators group.
(Navigate to https://{account}.visualstudio.com/_settings/security?_a=members)
Login with this account to manage the wiki security permissions for
your account.
After that you can remove the team member from Project Collection Administrators group.

Removing yourself from Visual Studio Team Services Accounts

On my visualstudio.com dashboard it says I am a member to a Team Service Account. How can I remove myself? The project is long done and I don't want to see that anymore. I am not the owner and cannot contact him.
This feature is now available in VSTS (now Azure DevOps Services). Login to one of your VSTS Account go to "My Profile". (top right corner) Then you can leave VSTS Accounts where your Account is a member.
Azure DevOps Services - leaving your organization
No, only account owner or administrator (in Project Collection Administrators group, Admin page > Security > Project Collection Administrators) can add or delete the account.

Leave from a repository in Visual Studio Team Services

I was invited to a project on Visual Studio Team Services (previously Visual Studio Online) and I accepted. But now, I want to leave the project and I can't find the option to do that.
Since I'm not an administrator, I can't just delete the project/account, and the owner is no longer active so he can't remove me. The project is now linked to my account and I just want to leave.
Usually delete users from the owner's Visual Studio Team Services account is the simplest solution in your scenario.
Since the owner is no longer active, you or others in thie project team could try to change the account ower. If no one have enough permission, you may have to contact Team service support.
You must have at least Basic access, not Stakeholder, and Team
Services project collection administrator or account owner
permissions. If no one has these permissions, contact Team Services
Support.
Source Link: Change account owner for Visual Studio Team Services

Granting access to a user in TFS for a limited time

I'm a QA team member and responsible for granting access to developers, there is more than 100 developer and sometimes I forget revoke the access which was granted, it has dire consequences for me! I developed an application to remind me to revoke accesses, but still I'm facing the same problem because there is two other colleagues granting accesses
is there any option in TFS to grant accesses for a limited time?
thank you in advance
You should manage access to TFS via an Active Directory groups. It's easy to manage AD group membership via C# or even via PowerShell, and then all you need to do to revoke access is pull the user out of the AD groups.

Insufficient permission of TFS admin

Navigating to a project page of a TFS 2013 collection by Administrator account returns this error:
http://server:8080/tfs/DMS/ProjectX
Error
The page you are looking for is currently unavailable.
TF50309: The following account does not have sufficient permissions to complete the operation: Administrator. The following permissions are needed to perform this operation: View project-level information.
The modification of TFS administration console is also disabled as is seen in this screenshot:
How can I grant full access to this team project collection?
Administrator accounts do not automatically get TFS Administrator capability and it must be granted explicitly.
You need to speak to your TFS Admin and get them to grant access to your account.
If you are the TFS Admin you need the account that was used to install TFS.

Resources