Set Administrator Permissions for Team Project Collections

Visual Studio Team Foundation Server 2012

To grant administrator permissions to users for a team project collection, you add them to appropriate groups or grant them specific permissions in Visual Studio Team Foundation Server. If your collection uses resources on SharePoint Products and SQL Server Reporting Services, you also grant those permissions to users in those programs.

Project collection administrators maintain the collection and administer permissions and security for other roles at the collection level. Members of the Project Collection Administrators group have the highest set of permissions of any users in the collection and the second-highest set of permissions of any default group in Team Foundation Server. For most organizations that use Team Foundation Server, project collection administrators manage the collections that members of the Team Foundation Administrators group create, but members of the Project Collection Administrators group do not create the collections themselves. Project collection administrators also perform any operations that are required to maintain the collection, such as creating team projects, adding users to groups, or modifying the settings for the collection.

For information about how to set permissions for other members of the team, see Add Users to Team Projects.

An administrator for team project collections must belong to the following groups:

  • Team Foundation Server: Project Collection Administrators or the appropriate collection-level permissions set to Allow.

    For more information, see Team Foundation Server Default Groups, Permissions, and Roles.

  • SharePoint Products: If the collection is configured with a site collection resource, see Site Collection Administrators

    This group might vary depending on your version of SharePoint Products and the security requirements of your deployment. For more information, see Interactions Between SharePoint Products and Team Foundation Server and Roles in SharePoint Products

  • Reporting Services: If the collection is configured with reporting resources, see Team Foundation Content Manager

NoteNote

Even users who have appropriate permissions might not be able to view team project portals or reports correctly until they add the sites to their Trusted Sites in Internet Explorer. For more information, see this topic on the Microsoft Web site: User Account Control.

Required Permissions

To perform these procedures, you must either have the following permissions or belong to the following groups:

  • Project Collection Administrators group or the View Server-Level Information and Edit Server-Level Information permissions must be set to Allow

    For more information, see Open the Team Foundation Administration Console.

  • To add permissions for SharePoint Products, the Site Collection Administrators group or the Farm Administrators group for SharePoint Products

  • To add permissions for Reporting Services, the Content Managers group or the Project Content Managers group for Reporting Services

For more information about permissions, see Team Foundation Server Permissions.

In addition to these permissions, you might need to address the following requirements on a computer that is running Windows Server 2008 or Windows Vista:

  • To follow a procedure that requires Internet Explorer, you might need to start it as an administrator by clicking Start, clicking All Programs, right-clicking Internet Explorer, and then clicking Run as administrator.

  • To access Report Manager, reports, or Web sites for SQL Server Reporting Services, you might need to add these sites to the list of trusted sites in Internet Explorer or start Internet Explorer as an administrator.

For more information, see this topic on the Microsoft Web site: User Account Control.

To add users or groups in Team Foundation Server

  1. In Team Explorer, choose the Team menu, choose Team Project Collection Settings, and then choose Security.

    Team Web Access opens in the administration context for the team project, on the security tab.

  2. On the groups tab, choose Project Collection Administrators.

    Choose the members tab, choose Add, and then choose Add Windows user or group.

    The ADD A WINDOWS USER OR GROUP window opens.

  3. In Identities, specify the name of the user or group you want to add.

    TipTip

    The first time you add a user or group to Team Foundation Server, you cannot browse to it or check the name. After the identity has been added anywhere in Team Foundation Server, you will be able to use those functions to find the name.

  4. When you have finished adding the groups or users you want to add, choose Save Changes.

To grant administrative permissions in SharePoint Foundation 2010

  1. On the server that is running SharePoint Products, open SharePoint Central Administration.

    For more information, see Access Site Administration or Central Administration for SharePoint Products.

  2. Grant permissions that are appropriate for this user at the farm or the Web application level, depending on your security needs.

    For more information, see Windows SharePoint Services Roles and the following page on the Microsoft Web site: SharePoint Products Tech Center. For optimum interoperability, consider adding users of the Project Collection Administrators group to the following groups in SharePoint Products:

    • Site Collection Administrators group for the site collection that the team project collection uses

To grant administrative permissions for a team project collection in Reporting Services

  1. Start Internet Explorer.

    NoteNote

    Even if you are logged on with administrative credentials, you must start Internet Explorer as an administrator to perform this function on a computer that is running Windows Server 2008 or Windows Vista. To start Internet Explorer as an administrator, click Start, click All Programs, right-click Internet Explorer, and then click Run as administrator. For more information, see this topic on the Microsoft Web site: User Account Control.

  2. In the Address bar, specify the following URL, where ReportServer is the name of the server that is running Reporting Services: http://ReportServer/Reports/Pages/Folder.aspx

    Important noteImportant

    If you are using a named instance, you must include its name in the path of the reports. You use the following syntax, where ReportServer is the name of the report server for Team Foundation and InstanceName is the name of the instance of SQL Server: http://ReportServer/Reports_InstanceName/Pages/Folder.aspx

  3. On the Home page, choose Folder Settings.

  4. On the Security page, choose New Role Assignment.

  5. On the New Role Assignment page, in Group or user name, specify the name of the account for the user or group to whom you want grant administrative permissions.

  6. In Role, select the Team Foundation Content Manager check box, and then choose OK.

See Also

Tasks

Concepts

Understanding SQL Server and SQL Server Reporting Services

Other Resources

Interactions Between SharePoint Products and Team Foundation Server