Change Permissions for a Group or User
You can explicitly change permissions for a user or group at the project level, the collection level, or the server level in Visual Studio Team Foundation Server. If you change the permission for a group, you will potentially affect the permissions for all of the users who are members of that group. For example, a user might be a member of two groups in a project. If one group has a permission set to Deny and the other group has the same permission set to Allow, the user will be denied that permission. For more information, see Team Foundation Server Permissions.
Note
If you change permissions for users and groups in Team Foundation Server, you do not automatically change any permissions that they might have in SQL Server Reporting Services or SharePoint Products. You must manually change permissions for users and groups in those products.
Required permissions
To perform this procedure, you must be a member of the administrative group at the level of the group that you want to change. For example, if you want to change permissions for a group or user at the collection level, you must be a member of the Project Collection Administrators group for that collection, or your Edit Collection-Level Information permission must be set to Allow. For more information about permissions, see Team Foundation Server Permissions.
To change project-level permissions for a group or user
In Team Explorer, open the team project for which you want to change permissions for a group or user, and then choose Settings.
The Settings menu appears.
In the Settings menu, in Team Project, choose Security.
Team Web Access opens in the administration context for the team project, on the security tab.
On the groups tab, choose the group whose permissions you want to modify. Alternately, on the users tab, choose the user whose permissions you want to modify.
Once you have chosen a group or user, on the permissions tab, choose the permission you want to modify, and then toggle the value of that permission to the value you want to set for that user or group.
You can choose between the following values:
allow
deny
not set
inherited allow or inherited deny, if either of these values was the original value for the permission
Tip
If the value for a permission is inherited allow or inherited deny, you can choose Why? to trace where the inheritance originates.
When you have finished modifying permissions, choose Save Changes.
To change collection-level permissions for a group or user
In Team Explorer, choose Team, choose Team Project Collection, and then choose Security.
Team Web Access opens in the administration context for the team project collection, on the security tab.
On the groups tab, choose the group whose permissions you want to modify. Alternately, on the users tab, choose the user whose permissions you want to modify.
Once you have chosen a group or user, on the permissions tab, choose the permission you want to modify, and then toggle the value of that permission to the value you want to set for that user or group.
You can choose between the following values:
allow
deny
not set
inherited allow or inherited deny, if either of these values was the original value for the permission
Tip
If the value for a permission is inherited allow or inherited deny, you can choose Why? to trace where the inheritance originates.
When you have finished modifying permissions, choose Save Changes.
To modify permissions for groups at the server level
Open the administration console for Team Foundation on the application-tier server where you want to modify permissions for a server-level group.
Choose Application Tier, and then choose Administer Security.
The Global Security window opens.
Under Users and Groups, choose the group for which you want to modify permissions.
Note
If the group that you want to modify does not appear in the list, you must add it by using the controls in the Add users and groups section.
In Permissions, select or clear the Allow or Deny check box for the permission that you want to modify.
Note
If neither the Allow check box nor the Deny check box is selected, the permission level is set to Not Set. For more information, see Team Foundation Server Permissions.
When you finish modifying permissions, choose Close.
See Also
Concepts
Configuring Users, Groups, and Permissions