1 TFS 2008:Permissions for Creating Team Projects
2 ===============================================
3 :author: Aaron Ball
4 :email: nullspoon@iohq.net
5
6
7
8 I recently finished my Team Foundation build and am quite pleased with it. With
9 Team Foundation Server being new to me, I ran into a few issues with
10 permissions.
11
12 The Team Foundation server I built will be managing my team's code as well as
13 two other teams once everyone has moved over.
14
15 That being said, I need to give out permissions for the managers of each group
16 so they can create team projects for their teams.
17
18
19 [[lets-get-started]]
20 Let's Get Started
21 -----------------
22
23 image:files/01TeamExplorerTeamProjects.PNG[height=300]
24
25 Permissions for this are somewhat complicated in that they have to be
26 given in *for the user(s) to be able to create Team Projects and all of
27 the other services associated with one.
28
29 We'll start off with the **TFS permissions**.
30
31 image:files/02GroupMemberships.PNG[height=400]
32
33 By default, the service account has permissions to perform these actions so you
34 should be logged in as that account.
35
36 Head to your Team Explorer in Visual Studio and connect to your Team
37 Foundation Server. Right-click your server name, go to **Team Foundation
38 Server Settings**, and select **Group Membership**. From within here you
39 should see a group titled **Team Foundation Administrators**.
40 Double-click this group and add your user/group to it and you're done
41 with the TFS part.
42
43 '''*NOTE* '''To keep the Administrators group from becoming cluttered
44 with usernames and group names, I created a TFS group for Administrators
45 ( for instance) and simply added that group to Team Foundation
46 Administrators.
47
48 Next up we'll tackle **SQL Reporting Services permissions**.
49
50 image:files/03SQLServerReportingServices.PNG[height=250]
51
52 For this one you want to go to your SQL Reporting Services page (mine was
53 http://servername/Reports ).
54
55 Once there, click the *Properties* tab. Click *New Role Assignment* on
56 the page that loads. From here, enter the active directory username or
57 group name you want to have permissions to create team projects in TFS
58 and assign them * the *Content Manager* role. Once you're done, click
59 *OK* and you're done with the permissions for SQL Reporting Services.
60
61 Finally, **Windows SharePoint Services permissions**.
62
63 image:files/04CentralAdministration.PNG[height=350]
64
65 Head to your central administration site (Start -> Administrative Tools
66 -> SharePoint 3.0 Central Administration). Once there, click the
67 *Operations* tab at the top left. On that page, select *Update farm
68 administrators's group* (it's under the Security Configuration group). From
69 here, click *New* to add a new user (the button also has a drop down function
70 so if you get that, click **Add User**). On the **AddUser: Central
71 Administration page**, type in the username or groupname and add them to the
72 *Farm Administrators [Full Control]* group.
73
74 There you have it. You should now be good to add as many Team Projects
75 as you desire.
76
77 [[a-closing-thought]]
78 A Closing Thought
79 -----------------
80
81 I would recommend that the majority of this be done through active
82 directory groups. It makes usermanagement much easier. If someone quits
83 or it let go, all you have to do is remove their account from the group
84 in active directory and it takes care of everything in Sharepoint, TFS,
85 and SQL Reporting services instead of having to manually go in and
86 remove the person from every location.
87
88 On a side note, I'm going to get some lunch...
89
90 Category:Microsoft
91
92 Category:Team_Foundation_Server
93
94
95 // vim: set syntax=asciidoc:
|
