When Team Foundation Server is installed, the following default server-level groups (also known as global groups) are created. You can use these default server-level groups to control permissions for Team Foundation users.
Team Foundation Administrators
Can perform all privileged operations on the Team Foundation Server.
Team Foundation Valid Users
Have access to the Team Foundation Server. You cannot manually add or remove users or groups from this group in the Team Foundation Server user interface.
Team Foundation Service Accounts
Contains service accounts.
Team Foundation Licensed Users1
Allows 1-5 users to connect to the server installed with Team Foundation Server Work Group Edition.
1 This group is created only for the Team Foundation Server Work Group Edition.
When you create a new team project, Team Foundation creates the following default project-level groups.
Can manage the team project.
Can see the team project (read access).
Can modify the team project (read and write access).
Project Build Services
Can build the project.
You can use these default project-level groups to control permissions for team project members.