Change Permissions for a Group or User

You can explicitly change permissions for a user or group at the project level, the collection level, or the server level in Visual Studio Team Foundation Server. If you change the permission for a group, you will potentially affect the permissions for all of the users who are members of that group. For example, a user might be a member of two groups in a project. If one group has a permission set to Deny and the other group has the same permission set to Allow, the user will be denied that permission. For more information, see Team Foundation Server Permissions.

Required permissions

To perform this procedure, you must be a member of the administrative group at the level of the group that you want to change. For example, if you want to change permissions for a group or user at the collection level, you must be a member of the Project Collection Administrators group for that collection, or your Edit Collection-Level Information permission must be set to Allow. For more information about permissions, see Team Foundation Server Permissions.

To change project-level permissions for a group or user

1. In Team Explorer, open the team project for which you want to change permissions for a group or user, and then choose Settings.

   The Settings menu appears.

2. In the Settings menu, in Team Project, choose Security.

   Team Web Access opens in the administration context for the team project, on the security tab.

3. On the groups tab, choose the group whose permissions you want to modify. Alternately, on the users tab, choose the user whose permissions you want to modify.

   Once you have chosen a group or user, on the permissions tab, choose the permission you want to modify, and then toggle the value of that permission to the value you want to set for that user or group.

   You can choose between the following values:

   1. allow

   2. deny

   3. not set

   4. inherited allow or inherited deny, if either of these values was the original value for the permission

   Tip

   If the value for a permission is inherited allow or inherited deny, you can choose Why? to trace where the inheritance originates.

4. When you have finished modifying permissions, choose Save Changes.

To change collection-level permissions for a group or user

1. In Team Explorer, choose Team, choose Team Project Collection, and then choose Security.

   Team Web Access opens in the administration context for the team project collection, on the security tab.

2. On the groups tab, choose the group whose permissions you want to modify. Alternately, on the users tab, choose the user whose permissions you want to modify.

   Once you have chosen a group or user, on the permissions tab, choose the permission you want to modify, and then toggle the value of that permission to the value you want to set for that user or group.

   You can choose between the following values:

   1. allow

   2. deny

   3. not set

   4. inherited allow or inherited deny, if either of these values was the original value for the permission

   Tip

   If the value for a permission is inherited allow or inherited deny, you can choose Why? to trace where the inheritance originates.

3. When you have finished modifying permissions, choose Save Changes.

To modify permissions for groups at the server level

1. Open the administration console for Team Foundation on the application-tier server where you want to modify permissions for a server-level group.

2. Choose Application Tier, and then choose Administer Security.

   The Global Security window opens.

3. Under Users and Groups, choose the group for which you want to modify permissions.

   Note

   If the group that you want to modify does not appear in the list, you must add it by using the controls in the Add users and groups section.

4. In Permissions, select or clear the Allow or Deny check box for the permission that you want to modify.

   Note

   If neither the Allow check box nor the Deny check box is selected, the permission level is set to Not Set. For more information, see Team Foundation Server Permissions.

5. When you finish modifying permissions, choose Close.

See Also

Concepts

Configuring Users, Groups, and Permissions

Other Resources

Add Users to a Collection-Level Group