This documentation is archived and is not being maintained.

Walkthrough: Setting up Groups and Permissions

In a Team Foundation development environment, there are different groups of users who require access to different sets of resources. In this walkthrough, you will learn how to create a new group on your Team Foundation Server, add members, and grant permissions.

This walkthrough requires that the computer has Microsoft Visual Studio 2005 Team System and Team Foundation Server installed, and you must have administrator permissions on the computer and the Team Foundation Server that you are using.

Required Permissions

You must be a member of the Team Foundation Administrators group or have the Edit Server-Level Information permission set to Allow to complete this procedure. For more information about permissions, see Team Foundation Server Permissions.

To create a group on Team Foundation Server

  1. In Team Explorer, right-click the server name, select Team Foundation Server Settings, and then click Group Membership.

    The Global Groups window opens.

  2. In the Global Groups window, click New.

    The Create New Team Foundation Server Group window opens.

  3. In the Group name box, type the name for the new group, for example, Team Foundation Developers. Type a description for the group in the Description box, for example, Authorized Team Foundation Developers. Click OK.

    A new group is added to the server.

Now that you have created a new group, the next step is to add a member to the group. You can add either an individual member or group, or a pre-existing Team Foundation Server group. In the following procedure, you will add an individual member.

To add a member to your new group

  1. In the Global Groups window, click Properties.

    The Team Foundation Server Group Properties window opens.

  2. In Add member, select Windows User or Group, and then click Add.

    The Select Users or Groups window opens.

  3. If the correct location for the user you want to add is not displayed in the From this location box, click Locations, and select the appropriate location in the Locations dialog box.

  4. In the Enter the object names to select box, type the name of the user who you want to add. You can type multiple names separated by semicolons, and you can validate the names by clicking Check Names. When completed, click OK to add the users to the group.

Now that the group has been created, you must add it to the Team Foundation Server Global Security, and set appropriate permissions.

To add a group to Team Foundation Server Global Security

  1. In Team Explorer, right-click the server name, select Team Foundation Server Settings, and then select Security.

    The Global Security window opens.

  2. In Add users and groups, click Add.

    The Add Group window opens.

  3. Select the group that you want to add, and then click OK.

    The selected group is added to global security.

To set permissions for a group

  1. In the Global Security window, under Users and Groups, select the group that you just added.

  2. In the Permission box, examine the permissions listed. Select the Allow option for permissions that you want to grant to this group, select the Deny option for permissions that you want to deny this group. By default, permissions not explicitly granted are denied.

You have now created a new Team Foundation Server group and set permissions for this group. You must set permissions for Windows SharePoint Services and SQL Reporting Services separately. See Managing Permissions for links to topics that explain how to set permissions on these services at various levels.