Team Foundation Build Security Rights and Permissions
Team Foundation Server includes security rights and permissions applicable to the Team Foundation environment that includes Team Foundation Build. You can set these permissions in Team Foundation Server by right-clicking the team project in Team Explorer and clicking Security. For more information about the security permissions, see.
Additionally, you can set these permissions by using the TFSSecurity command-line utility. For more information, see.
If a user needs access to the build machine for investigation purposes, we recommend that you add the user to the build computer and grant the user permissions on the build directory. We recommend that you not grant the user build service account permissions, as that allows control of the entire build process.