How to add domain groups to "Project Administrators" group in Process Template?

Question

I'm creating Project Templates (TFS2010) for my organization with a template for each department, containing the domain user groups for each role of this department. The Problem is that there seems to be no way of adding the domain senior developer group to the Project Administrators group. If I add "Project Administrators" to "GroupsandPermissions.xml" I'm getting the following error in the log:

2011-04-21T14:15:47 | Module: GSSStructureUploader | Thread: 18 | TF30183: Error occurred while creating application group for : "Project Administrators"
---begin Exception entry---
Time: 2011-04-21T14:15:47
Module: Engine
Event Description: TF30162: Task "GroupCreation1" from Group "Groups" failed
Exception Type: Microsoft.TeamFoundation.Client.PcwException
Exception Message: The Project Creation Wizard encountered an error while creating groups on win-gs9gmujits8\DefaultCollection.
Exception Details: The Project Creation Wizard encountered a problem while creating groups on win-gs9gmujits8\DefaultCollection.
The reason for the failure cannot be determined at this time.
Because the operation failed, the wizard was not able to finish
creating the Team Project.
Stack Trace:
   at Microsoft.VisualStudio.TeamFoundation.GssStructureCreator.GetIdentitySidInternal(ProjectCreationContext context, XmlNode groupXmlNode, String identityName, String startMsg, String exceptionMsg)
   at Microsoft.VisualStudio.TeamFoundation.GssStructureCreator.Execute(ProjectCreationContext context, XmlNode taskXml)
   at Microsoft.VisualStudio.TeamFoundation.ProjectCreationEngine.TaskExecutor.PerformTask(IProjectComponentCreator componentCreator, ProjectCreationContext context, XmlNode taskXml)
   at Microsoft.VisualStudio.TeamFoundation.ProjectCreationEngine.RunTask(Object taskObj)
--   Inner Exception   --
Exception Message: TF50624: A group named Project Administrators already exists in scope SUSSTest01. (type SoapException)SoapException Details: <detail ServerTimeStamp="2011-04-21T14:15:47:170" ExceptionMessage="TF50624: A group named Project Administrators already exists in scope SUSSTest01." BaseExceptionName="Microsoft.TeamFoundation.TeamFoundationServerException" />

Exception Stack Trace:    at Microsoft.TeamFoundation.Proxy.GroupSecurityService.CreateApplicationGroup(String projectUri, String groupName, String groupDescription)
   at Microsoft.VisualStudio.TeamFoundation.GssStructureCreator.GetIdentitySidInternal(ProjectCreationContext context, XmlNode groupXmlNode, String identityName, String startMsg, String exceptionMsg)

--- end Exception entry ---

So it seems that the Project Administrators group is already existing. But I found no way of adding domain groups to it. Am I mising something?

Please Help! Thanks!

Thomas

Answer 1

Hi Thomas,

 

Thanks for your post.

 

Sorry for any inconvenience, as far as I know, it can’t support to add the domain user group to Process Template. During the Team Project initialization, the Process Template can’t initialize the domain user group.

---

John Qiao [MSFT]
MSDN Community Support | Feedback to us
Get or Request Code Sample from Microsoft
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Answer 2

Hi Thomas,

 

I marked the reply as answer, if you have any concern with it, please feel free to unmark it.     

---

John Qiao [MSFT]
MSDN Community Support | Feedback to us
Get or Request Code Sample from Microsoft
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Answer 3

Hi John,

what I wanted to achieve was adding an existing domain group to the Project Administrators group created during Team Project creation. It is a bit strange that I can add my domain groups to all Team Project groups automatically except for the Project Administrators group. It's really annoying always having to add the manually. So I hoped there is a way to do so in the project template.

Thomas

Answer 4

Hi Thomas,

 

Do you mean that you can add your domain groups to other Team Project groups(except Project Administrators group) during Team Project creation? If so, please share your experience here.

 

As far as I know, there have no way to add domain groups in Project Template to achieve that. 

---

John Qiao [MSFT]
MSDN Community Support | Feedback to us
Get or Request Code Sample from Microsoft
Please remember to mark the replies as answers if they help and unmark them if they provide no help.

Answer 5

Hi John,

Sorry, was a bit busy. But yes I am adding domain users. I added them to the GroupsandPermissions.xml file like this:

    <group name="Readers" description="Members of this group have access to the team project.">
     <permissions>
      <permission name="GENERIC_READ" class="PROJECT" allow="true" />
      <permission name="VIEW_TEST_RESULTS" class="PROJECT" allow="true" />
      <permission name="GENERIC_READ" class="CSS_NODE" allow="true" />
      <permission name="WORK_ITEM_READ" class="CSS_NODE" allow="true" />
     </permissions>
     <members>
      <member name="DOMAINNAME\Domaingroup_Reader" />
     </members>
    </group>

And it seems to work for the TFS itself. If it is working for sharepoint and reporting I'm not shure.

Answer 6

Hi all,

I´m facing the same thing, in my GroupsandPermissions.xml are only the "Contributors", "Builders" and "Readers". I can successfully add existing domain groups to this groups like Liebethal showed.

My problem is that I don´t know how to add members to the "Project Administrators" group, it seems this group is somewhere else defined. Has anybody an idea?

regards, Sascha

Answer 7

Did you ever figure this out? I have the same issue.

One idea would be to create another custom group with the same permissions as "Project Administrators" and add the AD group to that one... but I would rather use the default group if possible.

Answer 8

That's exactly what I did as a workaround. I never figured out how to use the "Project Administrators".

Answer 9

Take a look here:

http://msdn.microsoft.com/en-us/library/dd380669.aspx

It says that to reference an existing project in the permissions you have to use a macro (ie variable).

For project administrators it would be  $$PROJECTADMINGROUP$$.