2 out of 7 rated this helpful - Rate this topic

TFSSecurity Command-Line Utility Commands

Use TFSSecurity to create, modify, and delete Team Foundation Server groups and users as well as permissions for users and groups.

The TFSSecurity command-line utility is located in <drive>:\Program Files\Microsoft Visual Studio 2005 Team Foundation Server\Tools on the Team Foundation Server application tier.

The following options are supported for all the TFSSecurity commands.

option Description

/?

Displays the command syntax and options for TFSSecurity.

In This Section

Did you find this helpful?
(1500 characters remaining)
Community Content Add
Annotations FAQ
List of commands with short description (from TFSSecurity /?)
/i identity (/collection:CollectionURI | /server:ServerURI)
 Displays identity information without any membership information.
/im identity (/collection:CollectionURI | /server:ServerURI)
 Displays identity information with direct membership information.
/imx identity (/collection:CollectionURI | /server:ServerURI)
 Displays identity information with expanded membership information.
/g [scope] (/collection:CollectionURI | /server:ServerURI)
 Lists the groups within a project scope. The project scope is a project uniform resource identifier (URI). If the scope is omitted, the groups displayed are those that belong to the scope specified by /collection or /server, depending on which was used.
/gcg groupName [groupDescription] (/collection:CollectionURI | /server:ServerURI)
 Creates a collection-level or instance-level group.
/gc scope groupName [groupDescription] /collection:CollectionURI
 Creates a project-level group within a project scope. The project scope is a project uniform resource identifier (URI).
/gun groupidentity groupname (/collection:CollectionURI | /server:ServerURI)
 Renames a collection-level or instance-level group.
/gud groupidentity groupdescription (/collection:CollectionURI | /server:ServerURI)
 Changes the description for a collection-level or instance-level group.
/gd groupIdentity (/collection:CollectionURI | /server:ServerURI)
 Deletes a group from the collection-level or instance-level.
/g+ groupIdentity memberIdentity (/collection:CollectionURI | /server:ServerURI)
 Adds a user or a group to an existing group.
/g- groupIdentity memberIdentity (/collection:CollectionURI | /server:ServerURI)
 Removes a user or group from an existing group.
/m groupIdentity [memberIdentity] (/collection:CollectionURI | /server:ServerURI)
 Checks explicit and implicit group membership information for a specified group or user.
/a [namespace] (/collection:CollectionURI | /server:ServerURI)
 Displays information about what options are valid for the command at the collection-level or the instance-level, as determined by the /collection or /server parameter. If namespace is not specified, lists the available namespaces at the specified level. If a namespace is specified, lists the available actions for that namespace at the specified level.
/a+ namespace token action identity (ALLOW | DENY) (/collection:CollectionURI | /server:ServerURI)
 Adds permissions for a user or group to a instance-level, collection-level, or project-level group.
/a- namespace token action identity (ALLOW | DENY) (/collection:CollectionURI | /server:ServerURI)
 Removes permissions for a user or group from a instance-level, collection-level, or project-level group.
/acl namespace token (/collection:CollectionURI | /server:ServerURI)
 Displays the access control list for a particular object. Displays identity information without any membership information.