1 TFS 2008:Permissions for Creating Team Projects
2 ===============================================
3 :author: Aaron Ball
4 :email: nullspoon@iohq.net
5
6
7 == {doctitle}
8
9 I recently finished my Team Foundation build and am quite pleased with it. With
10 Team Foundation Server being new to me, I ran into a few issues with
11 permissions.
12
13 The Team Foundation server I built will be managing my team's code as well as
14 two other teams once everyone has moved over.
15
16 That being said, I need to give out permissions for the managers of each group
17 so they can create team projects for their teams.
18
19
20 [[lets-get-started]]
21 Let's Get Started
22 -----------------
23
24 image:files/01TeamExplorerTeamProjects.PNG[height=300]
25
26 Permissions for this are somewhat complicated in that they have to be
27 given in *for the user(s) to be able to create Team Projects and all of
28 the other services associated with one.
29
30 We'll start off with the **TFS permissions**.
31
32 image:files/02GroupMemberships.PNG[height=400]
33
34 By default, the service account has permissions to perform these actions so you
35 should be logged in as that account.
36
37 Head to your Team Explorer in Visual Studio and connect to your Team
38 Foundation Server. Right-click your server name, go to **Team Foundation
39 Server Settings**, and select **Group Membership**. From within here you
40 should see a group titled **Team Foundation Administrators**.
41 Double-click this group and add your user/group to it and you're done
42 with the TFS part.
43
44 '''*NOTE* '''To keep the Administrators group from becoming cluttered
45 with usernames and group names, I created a TFS group for Administrators
46 ( for instance) and simply added that group to Team Foundation
47 Administrators.
48
49 Next up we'll tackle **SQL Reporting Services permissions**.
50
51 image:files/03SQLServerReportingServices.PNG[height=250]
52
53 For this one you want to go to your SQL Reporting Services page (mine was
54 http://servername/Reports ).
55
56 Once there, click the *Properties* tab. Click *New Role Assignment* on
57 the page that loads. From here, enter the active directory username or
58 group name you want to have permissions to create team projects in TFS
59 and assign them * the *Content Manager* role. Once you're done, click
60 *OK* and you're done with the permissions for SQL Reporting Services.
61
62 Finally, **Windows SharePoint Services permissions**.
63
64 image:files/04CentralAdministration.PNG[height=350]
65
66 Head to your central administration site (Start -> Administrative Tools
67 -> SharePoint 3.0 Central Administration). Once there, click the
68 *Operations* tab at the top left. On that page, select *Update farm
69 administrators's group* (it's under the Security Configuration group). From
70 here, click *New* to add a new user (the button also has a drop down function
71 so if you get that, click **Add User**). On the **AddUser: Central
72 Administration page**, type in the username or groupname and add them to the
73 *Farm Administrators [Full Control]* group.
74
75 There you have it. You should now be good to add as many Team Projects
76 as you desire.
77
78 [[a-closing-thought]]
79 A Closing Thought
80 -----------------
81
82 I would recommend that the majority of this be done through active
83 directory groups. It makes usermanagement much easier. If someone quits
84 or it let go, all you have to do is remove their account from the group
85 in active directory and it takes care of everything in Sharepoint, TFS,
86 and SQL Reporting services instead of having to manually go in and
87 remove the person from every location.
88
89 On a side note, I'm going to get some lunch...
90
91 Category:Microsoft
92
93 Category:Team_Foundation_Server
94
95
96 // vim: set syntax=asciidoc:
|