/a- Command
Important This document may not represent best practices for current development, links to downloads and other resources may no longer be valid. Current recommended version can be found here. ArchiveDisclaimer

/a- Command

Use /a- to remove an access control entry.

Required Permissions

To use the /a- command, you must be a member of the Team Foundation Administrators security group. For more information, see Team Foundation Server Permissions.

TFSSecurity /a- objectID actionID identity (ALLOW | DENY) /server:servername


Argument Description


URI of the access control object.


Name of the permission. For a list of valid IDs, see Team Foundation Server Permissions and Team Foundation Server Default Groups, Permissions, and Roles.


Specifies the identity of the user or the group. For more information on the identity specifiers, see TFSSecurity Identity and Output Specifiers.


    The group or user is granted access to the operation specified by the actionID.

  • DENY

    The group or user is denied access to the operation specified by the actionID.

/server :servername

Required. Specifies the name of the application tier server.

Run this command on the local application tier computer.

Access control entries are security mechanisms that determine which operations a user, group, service, or computer is authorized to perform on a computer or server.

© 2015 Microsoft