I have two users say user Ad and user Us, Ad has admin rights and is the account used to install and configure TFS 2015, user Us is an admin which has all permissions needed for an administrator.
Now when I tried to create a new project from Visual Studio 2015 the get the below error:
Error
The Project Creation Wizard encountered an error while creating reports to the SQL Server Reporting Services on
Interestingly, my Ad account does not have SYSDBA permission on the databases when i get the error. But if i provide the SYSDBA permission to the Ad account the project creation utility works.
I want to know how is this possible? and is there a way to create a new project in TFS 2015 without having the SYSDBA permission?
Help appriciated!!!
If you just create a new project, usually you only need to be the memeber of the Project Collection Administrators Group and have the Create new projects permission set to Allow.
However, if you have SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment or a SharePoint Web application been configured for your deployment, you also need to become a member of Team Foundation Content Managers group and get Full Control permissions on the server that hosts SharePoint Products.
Has SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment?
If so, ask your administrator to add you as a member of the Team
Foundation Content Managers group on the server that hosts SQL Server
Reporting Services. Without these permissions, you’ll be unable to
create a team project.
More detail info please refer the link from MSDN: Create a team project
Permissions for TFS Team project creation:
1. Add the user to TFS Admin console users or to Project collection Admin group
2. If sharepoint is available, Add user to sharepoint Farm admin and also site collection administrators
3. If Reporting is configured, Give user Team Foundation Content Manager role.
Still if team project creation fails then Depending on the error check if user is added to TfsReports Folder security and then in to specific collection level folder security.
4. If error is related to Datasources then check if user is available at both reportDS and OlapreportDS security.
If you can give the exact error message base on that recommendations can be made. The above information is the basic requirement.
Related
I am using TFS 2018 update2, I have been given Project collection administrator level access for a project collection. But when I connect using VS2017 and create a Team project, I am getting TF218027 error. Please, let me know what the solution for this is.
The error message is very clearly, your account need to gain appropriate permission.
You need to set permissions on SQL Server Reporting separately from TFS itself.
TFS, Reporting Services and SharePoint all have independent permissions. The group "Project Collection Administrators" is internal to TFS and thus only gives access to the TFS functions, not the functions it uses on other servers.
The recommended approach is to create groups in AD (eg. "TFS Collection X Admins") in AD; and then use that group to give permissions in each of TFS, SharePoint and Reporting Services.
You could add a 'Content Manager' permissions, detail steps, please take a look at this thread: Error TF218027 when creating a Team Project in TFS 2010
Another way just as jessehouwing suggested in comment, you do not have to create with Report set, if your team actually no need the report feature, you could also disable the report settings, how to check the report configuration, please take a look at this link.
We are using tfs 2013 update 4.
One of our colleagues downloaded TFS PowerTools by itself and started to edit workflow and fields of our projects.
Is there any way to deny this functional for him?
Hi is not a project administrator, not TFS adminstrator. TFS powertools allows to change witd for all who can see the project.
Set his Manage Process Template permission to Deny. This is a collection-level setting.
They must have higher level permissions than you think. Maybe an AD group they are a member of has been added in to Collection Admins or something like that?
Customize a process template
"To download or upload process templates, you must either be a member
of the Project Collection Administrators group, or your Manage process
template permission must be set to Allow"
Download the sidekicks utility and you'll easily be able to see which permissions the user has.
Team Foundation Sidekicks
If they are a member of Project Admin, Collection Admin or Server Admin then remove them or explicitly deny the "manage process template" permission
I am very new in Team Foundation Server.
I want to create a server at home and i want to use this server from another computer with my developer partner.
The main problem is that, i don't want to create domain users to access team foundation server. I am running an svn server and i want to migrate its data to TFS. Can non domain user (only a dedicated user like in svn server) access TFS from outside of the network?
I installed a Windows Server 2012, SQL Server 2012 and Team Foundation Server 2012. I have created a team project, then i want to connect to server from visual studio from another computer and got a standard "server unable to access" error message.
Can anybody write down the solution by step by step?
There are a few choices for collaborating in tfs:
Domain: This is the easiest to setup, user-wise. All you have to do is be a member of the domain and a member in a team project.
You have already said that you do not want this option.
Workgroup This requires you setting up the TFS server as a work group and then creating users in that workgroup that represent your team members. You then add them to your tfs team project(s). The pain part comes from you having to make sure that the username and password your team members log in with matches the work group username and password.
This is probably going to be your best bet unless you want to subscribe to visual studio online.
Visual Studio Online
This is almost as easy as the domain setup but isn't free. But connecting remotely is a good option. Plus if you are doing any cloud work it integrates nicely.
This link (http://msdn.microsoft.com/en-us/library/ms252507(v=vs.100).aspx) from Microsoft describes various domain \ work group combos. The one I describe above refers to the one where everything is in a workgroup.
Local user accounts must be created on the Team Foundation server for
all users requiring access to the server. Local user accounts must be
added to Team Foundation Server server-level and project-level groups
so that the users are authorized on the Team Foundation server. When
connecting from a Team Foundation client, such as Team Explorer, in
the workgroup, the client user account credentials must match those of
the server, or the user will be prompted for a user name and password
for an account on the Team Foundation Server.
Suppose I have a team foundation server http://tfs:8080 and a collection named Collection1 and a project named Project1. How would I go about giving user User1 all privileges on the project? (Either by adding him to the Team Project Administrators group OR by granting individual privileges as you would in the GUI)
This is what i would recommend, download the TFS ADMIN tool http://tfsadmin.codeplex.com/, this is a community tool that for TFS Administrators, The TFS Administration Tool allows Team Foundation Server administrators to manage user permissions on all three platforms utilized by Team Foundation Server: Team Foundation Server, SharePoint, and SQL Server Reporting Services. The tool also allows administrators to easily copy user permissions among team projects and to easily identify any missing permissions on any of the three platforms.
However, you don't need the admin tool to assign permissions. You can right click on the team project and click on group membership, double click on the group that you would like to add the user to and add their windows login to the group. You can read more about this here, http://msdn.microsoft.com/en-us/library/ms252477.aspx
HTH
Cheers, Tarun
I just installed TFS Server 2010 on Windows 7 Ultimate.
I even managed to connect to the TFS server using Visual Studio 2010 - I didn't have to enter any login and password, as Windows Authentication was automatically used.
Now I need to add a new user to TFS, with a specific login and password, so that a member of the project could access the TFS server from the Internet.
However, I did not find a way to add a new user to TFS!
I used to work with Visual SourceSafe, and there the management of users was quite straightforward.
Any help would be appreciated!
It's a little weird in non-domain situations.
Create a new local user on your computer.
In Visual Studio, look on the Team menu for Team Project Collection settings
Add that new user to the Authorized Users group (I think-- I'm not able to access mine right now, so I'm not sure what it's called. It's something like that, though).
On the Team menu, find Team Project Settings
Add the same user to the Contributors group.
When the other user logs on, they will have to specify the TFS Application Tier computer as the domain name. For example, if you installed TFS on a computer named MyWin7Box, they would sign on as MyWin7Box\Username