Walkthrough: Setting up Groups and Permissions
In a Team Foundation development environment, there are different groups of users who require access to different sets of resources. In this walkthrough, you will learn how to create a new server-level group on your Team Foundation Server, add members, and grant permissions. Alternately, you can create and populate project-level groups instead of server-level groups. For more information, see Managing Groups.
Prerequisites
This walkthrough requires that the computer has Visual Studio Team System Team Foundation Server installed, and you must have administrator permissions on the computer and the Team Foundation Server that you are using.
Required Permissions
You must be a member of the Team Foundation Administrators group or have the Edit Server-Level Information permission set to Allow to complete this procedure. For more information about permissions, see Team Foundation Server Permissions.
To create a group on Team Foundation Server
In Team Explorer, right-click the server name, select Team Foundation Server Settings, and then click Group Membership.
The Global Groups window opens.
In the Global Groups window, click New.
The Create New Team Foundation Server Group window opens.
In the Group name box, type the name for the new group, for example, Team Foundation Developers. Type a description for the group in the Description box, for example, Authorized Team Foundation Developers. Click OK.
A new group is added to the server.
Adding Members to the Group
Now that you have created a new group, the next step is to add a member to the group. You can add either an individual member or group, or a pre-existing Team Foundation Server group. In the following procedure, you will add an individual member.
To add a member to your new group
In the Global Groups window, click Properties.
The Team Foundation Server Group Properties window opens.
In Add member, select Windows User or Group, and then click Add.
The Select Users or Groups window opens.
If the correct location for the user you want to add is not displayed in the From this location box, click Locations, and select the appropriate location in the Locations dialog box.
In the Enter the object names to select box, type the name of the user who you want to add. You can type multiple names separated by semicolons, and you can validate the names by clicking Check Names. When completed, click OK to add the users to the group.
Setting Permissions for the Group
Now that the group has been created, you must add it to the Team Foundation Server Global Security, and set appropriate permissions.
To add a group to Team Foundation Server Global Security
InTeam Explorer, right-click the server name, select Team Foundation Server Settings, and then select Security.
The Global Security window opens.
In Add users and groups, click Add.
The Add Group window opens.
Select the group that you want to add, and then click OK.
The selected group is added to global security.
To set permissions for a group
In the Global Security window, under Users and Groups, select the group that you just added.
In the Permission box, examine the permissions listed. Select the Allow option for permissions that you want to grant to this group, select the Deny option for permissions that you want to deny this group. By default, permissions not explicitly granted are denied.
Next Steps
You have now created a new Team Foundation Server group and set permissions for this group. You must set permissions for Windows SharePoint Services and SQL Reporting Services separately. See Managing Permissions for links to topics that explain how to set permissions on these services at various levels.
See Also
Tasks
How to: Set Team Foundation Server Administrator Permissions
How to: Set Team Foundation Server Project Lead Permissions
How to: Set Team Foundation Server Contributor Permissions
How to: Set Team Foundation Server Reader Permissions