I have a problem with adding of new accounts into Team Foundation Server 2010. I can add a new domain account into group Contributors of my team project without problems but after that I can't see it in the list of available accounts, for example, in the drop down list 'Assigned To' at a work item page.
The added user can see the project, do check-in and check-out but he can't get access to the project work items. He has got an error
TF201072: A user or group could not be found. Verify that the users and groups used in your work item type definition have been added to Team Foundation Server.
Can anybody help me?
First, make sure that you have the latest version of TFS. There have been many bugs fixed over the years and years since 2010 and you would be best servers to upgrade.
You should check the status of the TFS jobs, with the tfs Admin Pack:
http://blogs.msdn.com/b/granth/archive/2010/07/12/administrative-report-pack-for-team-foundation-server-2010.aspx
Is that user licenced?
we've got a tfs_member AD group which we've added in here:
http://yourtfs:8080/tfs/_admin/_licenses
to sort that out. The user has to be in that AD group and be in the project's contributors to show up .
Related
I want to use TFS 2012 code review template. I am using vS2012 online TFS workspace, where i created 5 of users.
From VS2012 I am trying to Add Reviewer to review my code, it display error like "Reviewer name is not in the list of allowed reviewers."
You need to go to your Team Project and add some users to your Team. If you first select your Team Project \ Team you will notice that you have a "Members (0)" on the right. If you click "Manage all members" under that heading you can add any number of Windows or Microsoft Id users to that list.
Now that you have the users added to the Team, if you also select that Team in Visual Studio you will be able to select any of those users for review. This list is in fact of all users that have 'contributor' permissions to the Team Project which is granted by using the above process.
If you are having trouble setting up and configuring teams I have created a post on Modelling Teams in Team Foundation Server 2013.
After several weeks with that problem, I found out that I had to do a hard clear cache on my Visual Studio. After that, it showed me a correct list of reviewers.
I found out that by this forum post: https://developercommunityapi.westus.cloudapp.azure.com/content/problem/1145784/reviewer-name-is-not-in-the-list-of-allowed-review-1.html
And here is how you can clear the cache of VS (I had to do all steps):
https://errorhandlinginskills.wordpress.com/2018/07/28/how-to-clear-visual-studio-cache/
If I load up TFS Web Access and go to Security > Users, I only see the 3 people I've added to my team. However, when I try to assign a task to someone in Web Access or in Visual Studio, it lists a bunch of users from the domain (not all users, looks like all IT people). Where does this come from? How can I change it... without exporting, editing and importing files via command line?
update: I found this line in the MSDN documentation:
Team Foundation \Team Foundation Valid Users
Members of this group
have access to Team Foundation Server. This group automatically
contains all users and groups that have been added anywhere within
Team Foundation Server. You cannot modify the membership of this
group.
I really don't understand... this is our own team's server, a separate install from the main dev team. I have no idea how these other 30 or 40 users got in this group. Major bonus <3 for any help on this. MikeR's answer will allow me to set administrators as the only assigness which will technically fix the issue, but I'd rather be able to use the groups as they were intended if possible.
The problem was that [TEAM FOUNDATION]\Valid Users included [TEAM FOUNDATION]\Team Foundation Administrators which included [BUILT IN]\Administrators
In the TFS Server Administration Console I selected Application Tier and clicked Group Membership. I then double-clicked on [TEAM FOUNDATION]\Team Foundation Administrators and removed [BUILT IN]\Administrators.
Now I only see my team and not all the SQL admins and engineers that were local admins on the server. All without any command line or addons.
This list of possible assings is defined in the WorkItemTypeDefinition. Usually you would export and import this. If you have the TFS PowerTools (http://visualstudiogallery.msdn.microsoft.com/b1ef7eb2-e084-4cb8-9bc7-06c3bad9148f) installed, you can directly work with the WITD in Visual Studio.
To do this, open "Tools->Process Editor->Work Item Types->Open WIT from Server". Choose the TeamProjectCollection you want to connect to and than choose the TeamProject and WorkItemType you are having trouble with.
Check the rules for "AssignedTo" field. Default could be the "ValidUser" rule, which includes every permitted user in TFS. Remove that rule and add a new one "AllowedValues" rule with values like "[project]\Project Administrators", than only "Project Administrators" can be assigned to this Work Item.
If there is already a group defined and not all "ValidUser", remove users from the group set is set there.
I have a TFS 2010 Work Item Type with a custom field called "Requested By." This field can be populated with any name, but since most of the requests come from project developers throughout the organization, the SUGGESTEDVALUES property should populate the dropdown list with members of any TFS team project.
I have tried various values for SUGGESTEDVALUES, but both Collection\ Project Collection Valid Users and Server\ Team Foundation Valid Users seem to return every valid Active Directory account—well over 10,000 names.
I recognize that one option is to add an ALLOWEDVALUES item with multiple LISTITEM entries for Project\ Contributors for every team project, but with more than 150 team projects in the organization, this would be time-consuming initially and challenging to manage in the future.
Is there any easy way to populate the drop-down with TFS valid users who have actually been assigned to any team project in the collection, and exclude "Valid" users who exist in Active Directory but have never been assigned to a project?
What do you get if you use Project Collection Valid Users?
Project Collection Valid Users is the correct group to use, and I have entered it correctly.
However, one project team wanted to make their code available to the entire organization, and added ORG\Domain Users to the [Project]\Readers group. This was discovered by running a full audit with TFS Projects based on a hunch that something like that must have happened.
Having answered this question with "because a project team was doin' it wrong," I have posted a follow-up question to find out how to correctly grant all valid TFS users access to a specific project. See How can I grant Team Project access to all Project Collection Users? for the discussion on (hopefully) doing this "the right way."
For some reason our developers can only add projects that they've created to Team Explorer, even though they've all been given rights to the other projects. I created a top level group and added all of their AD users to it, and I assigned that group rights to access all of our projects.
They can see the projects in Source Control Explorer, and are able to do their work, but if they try to add a project to Team Explorer, the Connect to Team Project dialog box only shows their own projects.
Is there some other set of permissions?
If you want to make everyone can see and operate each others project, you need to put your team group into Project Collection Administrators in Collection level
If you don't want everyone have admin right,
you need to tell everyone to put the team group into Readers group in the team project they created.
Actually, I don't think there is a way to create a group in Collection level to access all team projects.
In fact, I think the best solution for you situation should be everyone use the same Team project and put everyone in the Reader group in that team project.
So everyone can create their own project under that team project instead of creating their own team project.
If you still want to let everyone create their own team project,
I suggest you use Team Foundation Server Administration Tool to manage group membership.
Permission right usually given on team project level basic. By "top level group" if you mean by giving permission at collection level. then i will suggest you try adding member at 'team project level' under any required group with necessary permission. if you cant add the member ask the admin of the team project to add separately.
you can directly access the security page through web access by.
[TFS web access url]/[Collection]/[team project]/_admin/_security
Under the "TeamExplorer - Connect" there is an option to "Select Team Projects..." When you click on this a box should pop-up titled "Connect to Team Foundation Server" that has a select dropbox, a "Team Project Collections" panel and a "Team Projects" panel. The latter has a list of projects in the collection and each has a checkbox next to them.
Make sure the projects you are interested in are in the list, and have the box checked. You can use the "Select All" checkbox to turn them all on at once.
HTH
We have a team that consists of a number of non-developers - for these non-developers to create and modify Work Items, would they need to have VS 2010 / Team Explorer installed on their machines? Or is it possible to create and modify Work Items through the project's SharePoint site or some other built-in means?
I've not yet installed a full test TFS 2010 instance, so I can't check it out myself.
You can also create or edit workitems using Team System Web Access portal which will be configured as part of TFS2010 Installation. You can access this portal using this URL: http://[TFSServer]:8080/tfs/web
You can also configure users to access the restricted version of this portal(Work Item Only View) which the users can connect without using CAL. In this version, the users can add or edit the workitems only created by them.
You can create and edit work items from the sharepoint site for a team project in TFS 2010. but the users will still need a Client Access Licence (CAL) to do more than very basic work item management. The url will be something like http://[tfsServer]/sites/[tfsCollection]/[tfsTeamproject]/Dashboards/ProjectDashboard_wss.aspx. If you right click on the Team Project in Team Explorer and select "show project portal" then it will open a browser in the correct location.
I think the licence basically says that users can create and modify their own work items without a CAL. If they need to view work items created by other users, or allocate work items to other users, then a CAL is required.