locked
tfs - developers for all team projects RRS feed

  • Question

  • How can i set all domain developers (contributors) for all team projects? Also for new one. I don't want to add all developers (or their group) to new team project every time the project is created. There is no contributors role on collection-level.

    thx


    Player of Age of Empires 2 - The Conquerors
    Wednesday, November 16, 2011 4:02 PM

Answers

  • You can also consider modifying the process template to set up this group as default each time a new team project is created. Have a look at this walkthrough on msdn on how to add new default groups to the process template.

    [1] - http://msdn.microsoft.com/en-us/library/dd380669.aspx

    [2] - http://social.msdn.microsoft.com/Forums/en-HK/tfsprocess/thread/5763ec61-e3b1-410f-8a64-226a5c461d01

    HTH
    Cheers, Tarun 


    Please remember to mark the replies as answers if they help.

    Tarun Arora

    Blog: http://geekswithblogs.net/TarunArora  Subscribe in a reader

    • Marked as answer by manuel0081 Friday, November 18, 2011 12:14 PM
    Wednesday, November 16, 2011 11:02 PM
  • Hi Manuel,

     

    Thanks for your post.

     

    I don’t recommend to give Project Collection Administrators permission to all your developers.

     

    If you added all your developers in Domain\Group, then want to add this group to Team Project Contributors group, you can try to modify the GroupsandPermissions.xml file in Process Template like the follow:

     

            <group name="Contributors" description="Members of this group can add, modify, and delete items within the team project.">

              <permissions>

                <permission name="GENERIC_READ" class="PROJECT" allow="true" />

                <permission name="DELETE_TEST_RESULTS" class="PROJECT" allow="true" />

                <permission name="PUBLISH_TEST_RESULTS" class="PROJECT" allow="true" />

                …… ……

              </permissions>

              <members>

                <member name=" Domain\Group(domain\username)" />

              </members>       

            </group>


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us
    • Marked as answer by manuel0081 Friday, November 18, 2011 12:14 PM
    Friday, November 18, 2011 9:58 AM
    Moderator

All replies

  • You can't do that, as you noted there is no corresponding contributor group for a collection like there is for team projects.

    For new team projects, you can modify the process template to have it create new default TFS groups, with specific permissions. But you can't automatically
    add AD users to the group, that must be done after the team project has been created.

    If you need to do this for several team project, I suggest tht you use the command line tool for this:

    tfssecurity /g+ "Scrum Project\Readers" "Contoso\CEO" /collection:http://contoso:8080/tfs/defaultcollection

    This will add the CEO AD group to the Readers TFS group in the team project Scrum Project

    Hope that helps
    /Jakob


    Microsoft Community Contributor Award 2011
    Blog: http://geekswithblogs.net/jakob
    Twitter: http://twitter.com/jakobehn
    Wednesday, November 16, 2011 10:31 PM
  • You can also consider modifying the process template to set up this group as default each time a new team project is created. Have a look at this walkthrough on msdn on how to add new default groups to the process template.

    [1] - http://msdn.microsoft.com/en-us/library/dd380669.aspx

    [2] - http://social.msdn.microsoft.com/Forums/en-HK/tfsprocess/thread/5763ec61-e3b1-410f-8a64-226a5c461d01

    HTH
    Cheers, Tarun 


    Please remember to mark the replies as answers if they help.

    Tarun Arora

    Blog: http://geekswithblogs.net/TarunArora  Subscribe in a reader

    • Marked as answer by manuel0081 Friday, November 18, 2011 12:14 PM
    Wednesday, November 16, 2011 11:02 PM
  • ok, editing process template is a solution.

    I was thinking to give permission of collection administrator to all developers. Can i deny permission about modify security settings  (so only administrator at server level can do it)?

    Thx


    Player of Age of Empires 2 - The Conquerors
    Thursday, November 17, 2011 9:46 AM
  • Hi Manuel,

     

    Thanks for your post.

     

    I don’t recommend to give Project Collection Administrators permission to all your developers.

     

    If you added all your developers in Domain\Group, then want to add this group to Team Project Contributors group, you can try to modify the GroupsandPermissions.xml file in Process Template like the follow:

     

            <group name="Contributors" description="Members of this group can add, modify, and delete items within the team project.">

              <permissions>

                <permission name="GENERIC_READ" class="PROJECT" allow="true" />

                <permission name="DELETE_TEST_RESULTS" class="PROJECT" allow="true" />

                <permission name="PUBLISH_TEST_RESULTS" class="PROJECT" allow="true" />

                …… ……

              </permissions>

              <members>

                <member name=" Domain\Group(domain\username)" />

              </members>       

            </group>


    John Qiao [MSFT]
    MSDN Community Support | Feedback to us
    • Marked as answer by manuel0081 Friday, November 18, 2011 12:14 PM
    Friday, November 18, 2011 9:58 AM
    Moderator
  • yes i did.. i'm looking for other idea. In this way only admin create team process. I would a solution at collection or server level.

    Thx


    Player of Age of Empires 2 - The Conquerors
    Friday, November 18, 2011 12:14 PM