Change Permissions for a Group or User
You can explicitly change permissions for a user or group at the project level, the collection level, or the server level in Visual Studio Team Foundation Server. If you change the permission for a group, you will potentially affect the permissions for all of the users who are members of that group. For example, a user might be a member of two groups in a project. If one group has a permission set to Deny and the other group has the same permission set to Allow, the user will be denied that permission. For more information, see Team Foundation Server Permissions.
If you change permissions for users and groups in Team Foundation Server, you do not automatically change any permissions that they might have in SQL Server Reporting Services or SharePoint Products. You must manually change permissions for users and groups in those products.
To perform this procedure, you must be a member of the administrative group at the level of the group that you want to change. For example, if you want to change permissions for a group or user at the collection level, you must be a member of the Project Collection Administrators group for that collection, or your Edit Collection-Level Information permission must be set to Allow. For more information about permissions, see Team Foundation Server Permissions.
To change project-level or collection-level permissions for a group or user
In Team Explorer, click the team project that contains the group, or to change permissions for a collection-level group, click the collection that contains the group.
From the Team menu, point to Team Project Settings, and then click Security, or to change permissions for a server-level group, point to Team Foundation Server Settings, and then click Security.
Use one of the following methods:
For team project groups, in Project Security, select the group or user for which you want to change permissions.
For collection-level groups, in Global Security, select the group or user for which you want to change permissions.
Under Permissions for group or user name, select the permission that you want to change, select the Allow column to grant that permission, or select the Deny column to deny the permission.
To have the permissions from a parent group apply, clear both the Allow and Deny boxes.
To change server-level permissions for a group or user
For information about how to change server-level permissions, see Server-Level Groups.