I'm attempting to use Release Management vNext in TFS 2015 Update 2 RC2, however whenever I try to deploy to an environment, I get the error:
TF50309: The following account does not have sufficient permissions to complete the operation: [DefaultCollection]\Project Collection Service Accounts. The following permissions are required to complete the operation: View Project-Level Information.
I've looked everywhere in the settings, and cannot seem to find a way to configure the [DefaultCollection]\Project Collection Service Accounts group with this permission, the closest it comes is "View Collection-Level information".
Any idea what I'm doing wrong here?
If you have project level security permission, you can check user has 'View project-level information' permission. And check user is member of which groups and that groups have 'View project-level information' permission set.
view project-level permission is the permission of project-level. Just the same as View Collection-Level permission for project collection-level.
If you want to give a user or group the view-project level permission. Please follow the steps below to set this permission:
By GUI Give "View project-level information" permission to User in
Team Foundation Server
By Command: Tfs security /a+ details you can refer from
msdn
However this may solve your issue: Adding your build account on the environment machine in the following group
Related
I've installed and managed TFS 2017 serer
i want to ensure that the user on the virtual machines has only some permissions : launch build , view build console, push/pull code in branches
I've configured my server to set there persmission , but the user can override this settings when he click into security button
Thank you
[Update 1]
when i go to project security and check the group of my group "DevGroup" ; this last is a member of "Utilisateurs valides du projet" (this group have all permission) , when i try to remove this group as member of to "DevGroup" ;
this error message is showing :
Check the "Member of " of the users/group to see whether they have any admin permission. It's suggested adding the users/group in team project level, not collection level, and grant them the appropriate permission.
A user who is in the project administrators role and an administrator for the agent pool containing an existing build agent receives a permission denied message when trying to add a user defined capability to the build agent. What additional permissions do they need to be able to make this change?
They cannot be added as a TFS administrator or a collection administrator for internal security reasons.
You could add your custom user-defined capabilities with following steps:
Go to Agent Pools through the Settings button on top of the menu.
Select one of the agent in your agent pool.
Click the Capabilities tab to add your custom capabilities.
If the user is without permission to do this, you could try to add his account as the “Service Account” or “Administrator” role of the agent in the queue.
You could also give him the Administrator Role on a project agent pool. More details please take a look at this link: https://learn.microsoft.com/zh-cn/azure/devops/pipelines/agents/pools-queues?view=azure-devops#security
According to this resource:
http://www.opshub.com/ohrel/Resources/TFS/permissions.php?page=serviceaccount
I should see a "Users" tab in the Security tab in the Admin section of my Visual Studio online account.
I do not..
This is what I see: http://i.stack.imgur.com/RnN6s.jpg
I can search for the user I am trying to grant access to, but do not have permission (even as the account owner) to add the user to the "Project Collection Service Accounts" group.
The error message I receive is: "You do not have the required permissions to perform this action."
Has anyone seen this scenario before?
Any help you can offer will be greatly appreciated.
Rabbie.
so this is the issue:
I have a TFS 2012 installed on a server A and I want to install a TFS Build Service on server B. The TFS on server A has a DefaultCollection which I want to link it to a Team Build. When I try to configure the build server it shows a failure message: User1 needs "ManageBuildResources" permission set to allowed. User1 is NOT in any group, its a single lonely user, then I ask a coworker about the permissions. Now in the security settings of Team Explorer it shows that User1 has "ManageBuildResources" set to allowed on DefaultCollection. Still, when I try to configure it, it shows again the same failure message.
So I read in the Microsoft website that User1 must be in Project Collection Administrators group in order to configure a build server, do I need to make User1 a member of this group, even if User1 has all the privileges? Because I don't understand why it shows that User1 doesn't have privileges.
Thanks in advance!
Yes, you currently need to make a user part of Project Collection Administrators in order to be able to add a build server to your collection.
I'm trying to setup a TFS Build service but the config wizard keeps bombing out on Edit collection-level information permissions, which I have set as required.
There isn't much background information for this, its a new 2003 virtual sever with nothing but TFS build service installed. The only other Warning I get is about no firewall being installed so I cant see that interfering. The section of interest in the log is below.
Verify: Verify that the running account has the required Team Foundation Server permissions(TBRUNNINACOUNT): Starting Verification
TF279000: User domain\user.name does not have permission to add members to the Build Services group. To perform this action, the user must have the 'Edit collection-level information' permission set to Allow.
!Verify Error!: TF279000: User domain\user.name does not have permission to add members to the Build Services group. To perform this action, the user must have the 'Edit collection-level information' permission set to Allow.
"Verify: Verify that the running account has the required Team Foundation Server permissions(TBRUNNINACOUNT): Exiting Verification with state Completed and result Error"
!Verify Result!: 1 Completed, 0 Skipped: 0 Success, 1 Errors, 0 Warnings
Any help is greatly appreciated, I have no idea where to go from here.
Thanks, Tom.
I'm not sure why your Build should edit something on Collection level, but what should solve the problem is to add the permission to the "Project Collection Build Service Accounts". I expect that TBRUNNINACOUNT is member of this group, otherwise the build might fail.
To set the persmission do the following steps:
Open Team Explorer
connect to the TeamProjectCollection the build service should be used for
Right click on the root to get the context menu
choose "Team Project Collection Settings -> Security"
select the "Project Collection Build Service Accounts"
set 'Edit collection-level information' permission
Close dialogs by using ok
Now the account has the needed permission and the wizard should run through that point.
I had the same issue as basically I was picking up from where Tom left off.
On the TFS Server used for the source control I added my AD user account to the Project Collection Build Administrators group and it worked.