I have added users to Contributor Group in Team Project, but they are not able access the Team Project Portal. What could be the problem?
You have to manage permissions to TFS, Sharepoint and Reporting Services separately. This means that adding people to TFS groups does not automatically add them to Sharepoint and reporting services groups.
Please check below MSDN library for information on how to add users to Share Point Portal:
http://msdn.microsoft.com/en-us/library/bb558971.aspx
You can also use TFS Administration tool, which provides the options to add users to TFS, Sharepoint and Reporting Services from single place.
Related
I am using TFS 2018 update2, I have been given Project collection administrator level access for a project collection. But when I connect using VS2017 and create a Team project, I am getting TF218027 error. Please, let me know what the solution for this is.
The error message is very clearly, your account need to gain appropriate permission.
You need to set permissions on SQL Server Reporting separately from TFS itself.
TFS, Reporting Services and SharePoint all have independent permissions. The group "Project Collection Administrators" is internal to TFS and thus only gives access to the TFS functions, not the functions it uses on other servers.
The recommended approach is to create groups in AD (eg. "TFS Collection X Admins") in AD; and then use that group to give permissions in each of TFS, SharePoint and Reporting Services.
You could add a 'Content Manager' permissions, detail steps, please take a look at this thread: Error TF218027 when creating a Team Project in TFS 2010
Another way just as jessehouwing suggested in comment, you do not have to create with Report set, if your team actually no need the report feature, you could also disable the report settings, how to check the report configuration, please take a look at this link.
I want to restrict my TFS 2015 Update 3 (Moving to TFS 2018 shortly) project administrators, so that they are not allowed to add individual users to the TFS security groups. To add users we have in-place a custom solution where users are added to Ldap.
I have came to know from the link that "Edit team project level permission ACLs" permission defines the user management for the Project Administrators.
Is there a way by which I can stop the TFS team project administrators to not allow to add users?
Unfortunately, there is no such setting to not allow to add users. I have submitted a UserVoice at website below, you can vote it:
https://visualstudio.uservoice.com/forums/330519-visual-studio-team-services/suggestions/33317830-add-a-permission-that-not-allow-adding-users-in-tf
I have two users say user Ad and user Us, Ad has admin rights and is the account used to install and configure TFS 2015, user Us is an admin which has all permissions needed for an administrator.
Now when I tried to create a new project from Visual Studio 2015 the get the below error:
Error
The Project Creation Wizard encountered an error while creating reports to the SQL Server Reporting Services on
Interestingly, my Ad account does not have SYSDBA permission on the databases when i get the error. But if i provide the SYSDBA permission to the Ad account the project creation utility works.
I want to know how is this possible? and is there a way to create a new project in TFS 2015 without having the SYSDBA permission?
Help appriciated!!!
If you just create a new project, usually you only need to be the memeber of the Project Collection Administrators Group and have the Create new projects permission set to Allow.
However, if you have SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment or a SharePoint Web application been configured for your deployment, you also need to become a member of Team Foundation Content Managers group and get Full Control permissions on the server that hosts SharePoint Products.
Has SQL Server Analysis Services and SQL Server Reporting Services been configured for the deployment?
If so, ask your administrator to add you as a member of the Team
Foundation Content Managers group on the server that hosts SQL Server
Reporting Services. Without these permissions, you’ll be unable to
create a team project.
More detail info please refer the link from MSDN: Create a team project
Permissions for TFS Team project creation:
1. Add the user to TFS Admin console users or to Project collection Admin group
2. If sharepoint is available, Add user to sharepoint Farm admin and also site collection administrators
3. If Reporting is configured, Give user Team Foundation Content Manager role.
Still if team project creation fails then Depending on the error check if user is added to TfsReports Folder security and then in to specific collection level folder security.
4. If error is related to Datasources then check if user is available at both reportDS and OlapreportDS security.
If you can give the exact error message base on that recommendations can be made. The above information is the basic requirement.
I have created several projects in TFS 2010 for which SharePoint sites are also created.
Users that have access to projects (are members of predefined Contributors security group on project level) complain that they cannot access Shared documents through Visual Studio. All users are domain members.
Is there anything else related to users permissions that needs to be done in order they to be able to open Shared documents from VS? Thanks in advance.
You have to grant needed permissions on specific SharePoint sites related to projects too.
I recommend you to create AD security groups for each project, and grant permissions for every group respectively. That should solve your issues – users will then be able to access Shared documents in TFS projects.
Suppose I have a team foundation server http://tfs:8080 and a collection named Collection1 and a project named Project1. How would I go about giving user User1 all privileges on the project? (Either by adding him to the Team Project Administrators group OR by granting individual privileges as you would in the GUI)
This is what i would recommend, download the TFS ADMIN tool http://tfsadmin.codeplex.com/, this is a community tool that for TFS Administrators, The TFS Administration Tool allows Team Foundation Server administrators to manage user permissions on all three platforms utilized by Team Foundation Server: Team Foundation Server, SharePoint, and SQL Server Reporting Services. The tool also allows administrators to easily copy user permissions among team projects and to easily identify any missing permissions on any of the three platforms.
However, you don't need the admin tool to assign permissions. You can right click on the team project and click on group membership, double click on the group that you would like to add the user to and add their windows login to the group. You can read more about this here, http://msdn.microsoft.com/en-us/library/ms252477.aspx
HTH
Cheers, Tarun