locked
TFS Administration

    Question

  •  

    We recently decided to secure the TFS server. So we deleted all the non-admin users from the local Administrator group on TFS box. However, when we did that we started having all kinds of permission issues. We have created Team System User group, Team System Admin group at the server level. At the server level i also see group Builtin Administrator that has all the members from TFS local Administrator group. We also have various groups like Contributor, project Administrator, Reader, Build Services at individual Team Project level.

     

    I have added all non-admin users to the contributors group which helped to access work items. One problem i have is that the folders like documents, Reprots under a team project have red x for all non-admin users even after I made them project administrator. I tested with one of the users. I added him as local admin in TFS local Administrator group and the red x went away after I refreshed. The question i have is

     

    1. Does user have to be local admin in order to do access all the folders in a given team project?

     

    2. How can i set permissions at the folder level in a given team project?

     

    Any help in this regard will be appreciated.

     

    Thanks

    Umesh

    Wednesday, July 30, 2008 9:12 PM

Answers

  • The team project users need to have necessary permissions on SQL Reporting Service and Sharepoint service. Else you will see a red X on the resepective folders. Minimum Readers permission on Reporting Service and Contributors permission on Sharepoint is needed. Please visit the following link for how to do this:

    http://msdn.microsoft.com/en-us/library/bb552341.aspx

    Thursday, July 31, 2008 6:17 AM
  • In addition to GK, you can use the TFS Admin tool which allows you to set the permissions on all three systems:
    http://www.codeplex.com/TFSAdmin

     

    Regards

    Nicolas

    Thursday, July 31, 2008 9:48 AM

All replies

  • The team project users need to have necessary permissions on SQL Reporting Service and Sharepoint service. Else you will see a red X on the resepective folders. Minimum Readers permission on Reporting Service and Contributors permission on Sharepoint is needed. Please visit the following link for how to do this:

    http://msdn.microsoft.com/en-us/library/bb552341.aspx

    Thursday, July 31, 2008 6:17 AM
  • In addition to GK, you can use the TFS Admin tool which allows you to set the permissions on all three systems:
    http://www.codeplex.com/TFSAdmin

     

    Regards

    Nicolas

    Thursday, July 31, 2008 9:48 AM