Security and permission management tools for Azure DevOps
TFS 2017 | TFS 2015 | TFS 2013
While you set most permissions through the web portal, you can use other tools to manage security groups and permissions. For permissions that aren't available to manage through the web portal,you have the option to manage them using a command line tool.
To learn more about permissions not available through a user interface, see the Security namespace and permission reference, Internal namespaces and permissions.
Important
To view the content available for your platform, make sure that you select the correct version of this article from the version selector which is located above the table of contents. Feature support differs depending on the on-premises version of TFS you are using. .
To learn which on-premises version you are using, see What platform/version am I using?
Additional options include the following tools:
- TFSSecurity
- Tf Team Foundation Version Control (TFVC) permission command-line tool
- Tf git permission command-line tool
- Security REST API commands
You manage server-level permissions and security groups through the Team Foundation Administration Console, as well as a few select collection-level permissions.
You can use the tools listed in the following table to set permissions. Links in the table connect you to the article for setting permissions through the web portal.
| Permission level | Web portal security pages | TFSSecurity CLI | Tf CLI |
|---|---|---|---|
| Add users to a server instance | ✔️ | ✔️ | |
| Collection-level | ✔️ | ✔️ | |
| Project-level, test management, create tags | ✔️ | ✔️ | |
| Builds | ✔️ | ✔️ | |
| Build resources | ✔️ | ✔️ | |
| Git repository | ✔️ | ✔️ | ✔️ |
| Team Foundation Version Control | ✔️ | ✔️ | ✔️ |
| Area path | ✔️ | ✔️ | |
| Iteration path | ✔️ | ✔️ | |
| Work item query | ✔️ | ✔️ | |
| Work item tags | ✔️ | ✔️ | |
| Notifications or alerts | ✔️ | ||
| Releases | ✔️ | ✔️ |
In addition, Lab Management permissions can be managed through the TFSLabConfig command-line tool.
Setting permissions for SQL Server reports
For information about how to set permissions in Reporting Services, see Grant permissions to view or create SQL Server reports in TFS.
Setting permissions for SharePoint integration
For information about how to set permissions for SharePoint Products integrated with TFS, see Set SharePoint site permissions.
For more information, see Determine permission levels and groups in SharePoint 2013.