According to this resource:
http://www.opshub.com/ohrel/Resources/TFS/permissions.php?page=serviceaccount
I should see a "Users" tab in the Security tab in the Admin section of my Visual Studio online account.
I do not..
This is what I see: http://i.stack.imgur.com/RnN6s.jpg
I can search for the user I am trying to grant access to, but do not have permission (even as the account owner) to add the user to the "Project Collection Service Accounts" group.
The error message I receive is: "You do not have the required permissions to perform this action."
Has anyone seen this scenario before?
Any help you can offer will be greatly appreciated.
Rabbie.
Related
I am running Azure DevOps Server 2019 cu7. When I click on the Access Levels link at the Project Collection level, I get a page not found error for ../_admin/_licenses. I then upgraded my development farm to ADO Server 2020, and still have the same issue.
The app pool accounts are both System and I have added the System account to the iis_iusrs group.
Also, i get a page not found error when trying to hit the/_api/licenses/export api to try to get around the page not found error when using a browser.
It seems that you do not have the permission Edit Instance-level information
Steps:
Open Azure DevOps Server Administration Console->click the option Application Tier->click the button Administer Security->select [Team Foundation]\Team Foundation Valid Users and ensure the permission Edit instance-level information is set the allow. Then we could check the Access Levels page.
Result:
The permission is set to Deny
The permission is set to Allow
I am getting an Authorization_IdentityNotFound error when I try to run the Microsoft Contoso Airlines Team Example.
I registered my App at apps.dev.microsoft.com, added in all the Graph permissions (as well as Admin Consent) and added the Web.config.secrets file as described in the ReadMe.
Do I have to do something with an authentication token? I am using an Office 365 Developer Account.
Here are my permissions:
I am able to log in when running the app in Visual Studio, and I am able to get to the screen where you can select the airlines and crew members, but the error pops up when I click on 'Create Team'.
Here is the error:
I'm having troubles trying to add Azure Resource Manager Service Endpoint in TFS 2017. When i enter the required data and click on "Verify Connection" I can see the verified
when I click OK button , I get the following error
Does anyone have any idea how to fix it?
First double check if you have followed below tutorials to create this service Endpoint:
How to Setup an Azure Resource Manager Endpoint
Creating an Azure Resource Manager Service Endpoint
Such as make sure you have gave the service principal access to create resources in your subscription.
Click Browse and select Subscriptions
Select the subscription you are using
Click the Access button
Click Add
Select Contributor as the roll
Search and select the name of the application you just created
Click OK to grant the service principal access to your subscription
For more troubleshooting, please take a look at this link-- How to: Troubleshoot Azure Resource Manager service endpoints
Update from OP
Issue fixed by Upgrade to TFS2017 update1.
I'm attempting to use Release Management vNext in TFS 2015 Update 2 RC2, however whenever I try to deploy to an environment, I get the error:
TF50309: The following account does not have sufficient permissions to complete the operation: [DefaultCollection]\Project Collection Service Accounts. The following permissions are required to complete the operation: View Project-Level Information.
I've looked everywhere in the settings, and cannot seem to find a way to configure the [DefaultCollection]\Project Collection Service Accounts group with this permission, the closest it comes is "View Collection-Level information".
Any idea what I'm doing wrong here?
If you have project level security permission, you can check user has 'View project-level information' permission. And check user is member of which groups and that groups have 'View project-level information' permission set.
view project-level permission is the permission of project-level. Just the same as View Collection-Level permission for project collection-level.
If you want to give a user or group the view-project level permission. Please follow the steps below to set this permission:
By GUI Give "View project-level information" permission to User in
Team Foundation Server
By Command: Tfs security /a+ details you can refer from
msdn
However this may solve your issue: Adding your build account on the environment machine in the following group
I'm trying to setup a TFS Build service but the config wizard keeps bombing out on Edit collection-level information permissions, which I have set as required.
There isn't much background information for this, its a new 2003 virtual sever with nothing but TFS build service installed. The only other Warning I get is about no firewall being installed so I cant see that interfering. The section of interest in the log is below.
Verify: Verify that the running account has the required Team Foundation Server permissions(TBRUNNINACOUNT): Starting Verification
TF279000: User domain\user.name does not have permission to add members to the Build Services group. To perform this action, the user must have the 'Edit collection-level information' permission set to Allow.
!Verify Error!: TF279000: User domain\user.name does not have permission to add members to the Build Services group. To perform this action, the user must have the 'Edit collection-level information' permission set to Allow.
"Verify: Verify that the running account has the required Team Foundation Server permissions(TBRUNNINACOUNT): Exiting Verification with state Completed and result Error"
!Verify Result!: 1 Completed, 0 Skipped: 0 Success, 1 Errors, 0 Warnings
Any help is greatly appreciated, I have no idea where to go from here.
Thanks, Tom.
I'm not sure why your Build should edit something on Collection level, but what should solve the problem is to add the permission to the "Project Collection Build Service Accounts". I expect that TBRUNNINACOUNT is member of this group, otherwise the build might fail.
To set the persmission do the following steps:
Open Team Explorer
connect to the TeamProjectCollection the build service should be used for
Right click on the root to get the context menu
choose "Team Project Collection Settings -> Security"
select the "Project Collection Build Service Accounts"
set 'Edit collection-level information' permission
Close dialogs by using ok
Now the account has the needed permission and the wizard should run through that point.
I had the same issue as basically I was picking up from where Tom left off.
On the TFS Server used for the source control I added my AD user account to the Project Collection Build Administrators group and it worked.