How to: Set Team Foundation Server Project Lead Permissions

Before users can act in different Team Foundation roles, you must grant each user the appropriate permissions for Visual Studio Team System Team Foundation Server, Reporting Services, and SharePoint Products and Technologies. This topic describes what permissions a Team Foundation Server project lead needs and how you can set those permissions appropriately.

Note

Even after you configure permissions for your users in Team Foundation Server, Reporting Services, and SharePoint Products and Technologies, they might not be able to view team project portals or reports correctly until they add the sites to their Trusted Sites in Internet Explorer. For more information, see the Microsoft Web site.

Generally, a Team Foundation Server project lead is in charge of a team project. The project lead maintains a team project work item database, team project portal, and permissions and security for the team project. Members of the Project Administrators group have the second-least-restricted set of permissions of any Team Foundation Server users. Only members of the Team Foundation Administrators group have a less restrictive set of permissions, including the permissions required to create a team project. Most of the time, the Team Foundation administrator must add a user or group to the project to act as the team project lead. A team project lead must be a member of the following groups:

• Team Foundation Server Project Administrators

• Windows SharePoint Services Site Administrators

• SQL Server Reporting Services Content Manager

Note

By default, only members of the Team Foundation Administrators group can create projects.

Required Permissions

To add a member to the Project Administrators group, you must be a member of the following:

• Team Foundation Administrators group or have the Edit Server-Level Information permission set to Allow

• Windows SharePoint Services Site Administrators group, a member of the SharePoint Administration group, or a member of the Administrators group on the Team Foundation application-tier server

• SQL Reporting Services Content Managers group

For more information about permissions, see Team Foundation Server Permissions.

In addition to these permissions, you might need to address the following requirements on a computer that is running Windows Server 2008 or Windows Vista:

• To follow a command-line procedure, you might need to open an elevated Command Prompt by clicking Start, right-clicking Command Prompt, and clicking Run as Administrator.

• To follow a procedure that requires Internet Explorer, you might need to start it as an administrator by clicking Start, clicking All Programs, right-clicking Internet Explorer, and then clicking Run as administrator.

• To edit web.config files, you might need to start the text editor as an administrator by clicking Start, clicking All Programs, right-clicking the editor, and then clicking Run as administrator.

• To access Report Manager, reports, or Web sites for SQL Server Reporting Services, you might need to add these sites to the list of trusted sites in Internet Explorer or start Internet Explorer as an administrator.

For more information, see the Microsoft Web site.

To add a member to the Project Administrators group

1. In Visual Studio, open Team Explorer, and then connect to Team Foundation Server. For more information, see How to: Connect to Team Foundation Server.

2. Right-click the team project node, point to Team Project Settings, and then click Group membership.

3. Select Project_Name**\Project Administrators**, where Project_Name represents the name of the project to which you want to add an administrator, and then click Properties.

4. In Add member, select Windows User or Group, and then click Add.

5. Add the Windows logon name for the person or group to whom you want to grant permissions, and then click OK twice.

To add a member to the SharePoint Products and Technologies Administrator group for the project site

1. In Visual Studio, open Team Explorer, and then connect to Team Foundation Server.

2. Right-click the team project node, and then click Show Project Portal.

3. Do one of the following:

   If you are using Windows SharePoint Services 3.0:

   1. Click Site Actions, click Site Settings, click People and Groups, click New, and then click Add Users.

   2. In Add Users, type the name of the user or group to whom you want to grant permissions.

   3. In Give Permission, select the Full Control check box, and then click OK.

      Note   You can create custom groups in Windows SharePoint Services 3.0 with the Full Control permission and then add users directly to that group. For more information, see the Windows SharePoint Services TechCenter on the Microsoft Web site.

   If you are using Windows SharePoint Services 2.0:

   1. Click Site Settings, click Manage Users, and then click Add Users.

   2. In Step 1: Choose Users, type the name of the user or group to whom you want to grant permissions.

   3. In Step 2: Choose Site Groups, click Administrator, and then click Next.

   4. In Step 3: Confirm Users, type the e-mail address of the user.

   5. In Step 4: Send E-mail, specify whether to automatically send the user an e-mail.

   6. Click Finish.

To add a member to the Reporting Services Content Manager role

1. Start Internet Explorer.

   Note

   Even if you are logged on with administrative credentials, you must start Internet Explorer as an administrator to perform this function on a computer that is running Windows Server 2008 or Windows Vista. To start Internet Explorer as an administrator, click Start, click All Programs, right-click Internet Explorer, and then click Run as administrator. For more information, see the Microsoft Web site.

2. Type the following in the Address bar, where ReportingServices is the name of the server that hosts Reporting Services: http://ReportingServices/Reports/Pages/Folder.aspx.

   You can find the name of the report server by opening Team Explorer, expanding the Reports node, and viewing the properties of a report.

   Important Note:
   If you are using a named instance, you must include its name in the path to the reports. You use the following syntax, where ReportingServicesr is the name of the server that hosts Reporting Services, and InstanceName is the name of the SQL Server instance: http://ReportingServices/Reports_InstanceName/Pages/Folder.aspx

3. Click the Properties tab, and then click New Role Assignment.

4. In Group or User Name, add the Windows logon name for the person you want to add to this group.

5. In Role, select Content Manager, and then click OK.

See Also

Tasks

How to: Set Team Foundation Server Administrator Permissions

How to: Set Team Foundation Server Contributor Permissions

How to: Set Team Foundation Server Reader Permissions

Concepts

Team Foundation Server Permissions

Team Foundation Server Default Groups, Permissions, and Roles

Other Resources

Managing Users and Groups

Securing Team Foundation Server